Description
漏洞源于 Ingress NGINX Controller 的准入控制器在处理 Ingress 对象时，未对用户输入进行充分验证和清理。攻击者通过向准入控制器发送恶意的 AdmissionReview 请求，可以注入任意 NGINX 配置指令，并在配置验证阶段（使用 nginx -t）触发代码执行。
Kubernetes ingress-nginx 输入验证错误漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.knowsafe.com/ti/info/0/994753
https://cve.imfht.com/poc_detail/8a1cab56ef4e0697a71ae4ebedca0c1b5125802b?lang=en
https://docs.ksyun.com/documents/44267
https://www.cnvd.org.cn/patchInfo/show/672816
https://www.nsfocus.net/vulndb/118333
https://help.aliyun.com/zh/ack/product-overview/security-advisory-for-cve-2025-1097-cve-2025-1098-cve-2025-1974-cve-2025-24513-and-cve-2025-24514
https://chinese.opswat.com/blog/ingressnightmare-cve-2025-1974-remote-code-execution-vulnerability-remediation
https://g7shot.com/posts/k8s/ingressnightmare-cve-2025-1974/
https://support.huaweicloud.com/bulletin-cce/cce_bulletin_0121.html
https://nvd.nist.gov/vuln/detail/CVE-2025-1097
https://github.com/advisories/GHSA-823x-fv5p-h7hw
https://www.runzero.com/blog/k8s-ingress-nginx-controller/
https://www.sysdig.com/blog/detecting-cve-2026-3288-cve-2026-24512-ingress-nginx-configuration-injection-vulnerabilities-for-kubernetes
https://discuss.kubernetes.io/t/security-advisory-cve-2026-3288-ingress-nginx-rewrite-target-nginx-configuration-injection/34289