CVE-2021-25745

score

<0.1

cvss

7.6

epss

1.2%

published

2022-05-06

kev added

—

first seen

2026-10-21

ingress-nginx contains a security issue where a user with permissions to create or update ingress objects can use the spec.rules[].http.paths[].path field to access ingress-nginx controller credentials, which in default configuration have access to all secrets in the cluster.