ingress-nginx auth-proxy-set-headers nginx configuration injection

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 6, 2026 · Kubernetes Security

   Detected

   ingress-nginx auth-proxy-set-headers nginx configuration injection

Sources

• CVE.orgVulnerability recordCVE-2025-15566

  Official CVE identifier

  cve.org
• Kubernetes SecurityVendor advisoryCVE-2025-15566

  ingress-nginx auth-proxy-set-headers nginx configuration injection

  github.com