---
id: CVE-2025-1097
aliases:
  - GHSA-823x-fv5p-h7hw
  - GO-2025-3565
title: >-
  ngress-nginx controller - configuration injection via unsanitized
  auth-tls-match-cn annotation
summary: >-
  ngress-nginx controller - configuration injection via unsanitized
  auth-tls-match-cn annotation
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: ingress-nginx
product: k8s.io/ingress-nginx
ecosystem: go
affected:
  - k8s.io/ingress-nginx < 1.11.5
  - 'k8s.io/ingress-nginx >= 1.12.0-beta.0, < 1.12.1'
patched:
  - k8s.io/ingress-nginx 1.11.5
  - k8s.io/ingress-nginx 1.12.1
published: '2025-03-25'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:49:48.411809133Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-823x-fv5p-h7hw'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-1097'
  - url: 'https://github.com/kubernetes/kubernetes/issues/131007'
  - url: 'https://github.com/kubernetes/ingress-nginx'
  - url: >-
      https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5
  - url: >-
      https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1
  - url: 'https://groups.google.com/g/kubernetes-security-announce/c/2qa9DFtN0cQ'
  - url: 'https://security.netapp.com/advisory/ntap-20250328-0008'
tags:
  - osv
  - go
  - exploit-available
epss: 0.35534
epssPercentile: 0.98385
exploits:
  exploitdb: true
  github: 2
  githubRepos:
    - 'https://github.com/hakaioffsec/IngressNightmare-PoC'
    - 'https://github.com/lufeirider/IngressNightmare-PoC'
  nuclei:
    - CVE-2025-1097
  checkedAt: '2026-09-24T07:52:52.772Z'
exploitAvailable: true
ingestedAt: '2026-09-12T03:13:01.765Z'
---

## Overview

A security issue was discovered in [ingress-nginx](https://github.com/kubernetes/ingress-nginx) where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

## Affected packages

- `k8s.io/ingress-nginx < 1.11.5`
- `k8s.io/ingress-nginx >= 1.12.0-beta.0, < 1.12.1`

## Remediation

Upgrade to a patched release:

- `k8s.io/ingress-nginx 1.11.5`
- `k8s.io/ingress-nginx 1.12.1`