Skip to content

Security issue

We want to inform you about critical security vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974) impacting the Ingress NGINX Controller. These vulnerabilities could lead to unauthenticated remote code execution and potentially result in complet cluster takeover.

Affected Versions:

  • All versions earlier than v1.11.0
  • Versions v1.11.0 - v1.11.4
  • Version v1.12.0
Edited by Jelle Bakker

Merge request reports

Loading