Medium severity · published Mar 24, 2025
CVE-2025-24513
ingress-nginx controller - auth secret file path traversal vulnerability
4.8
CVSS
3.3%
EPSS
No
On KEV
Description
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
ingress-nginx · kubernetes
through 1.11.4; 1.12.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-24513
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-24513
github.com
https://github.com/kubernetes/kubernetes/issues/131005
security.netapp.com
https://security.netapp.com/advisory/ntap-20250328-0008/
More from ingress-nginx
9.8
CVE-2025-1974
ingress-nginx admission controller RCE escalation
8.8
CVE-2026-4342
ingress-nginx comment-based nginx configuration injection
8.8
CVE-2026-3288
ingress-nginx rewrite-target nginx configuration injection
8.8
CVE-2025-15566
ingress-nginx auth-proxy-set-headers nginx configuration injection
8.8
CVE-2026-24512
ingress-nginx auth-method nginx configuration injection
