Skip to content

CVE-2025-1974 — NGINX Ingress Controller RCE

Key facts

CVE-2025-1974 is a Critical vulnerability: NGINX Ingress Controller RCE. This entry ships a detection-only PoC.
CVE CVE-2025-1974
Severity Critical
Detection / prevention —
PoC poc.py
Source 2025/CVE-2025-1974/

Details

Overview

IngressNightmare - unauthenticated RCE on Kubernetes clusters

Vulnerability Details

  • CVE ID: CVE-2025-1974
  • CVSS Score: 9.8 (Critical)
  • Type: RCE
  • Product: NGINX Ingress Controller

Affected Products

  • NGINX Ingress Controller (specific versions - check vendor advisory)

Proof of Concept

Usage

python3 poc.py -t https://target.com -c
python3 poc.py -t https://target.com -c --version-only

Mitigation

  1. Apply vendor patches immediately
  2. Implement network segmentation
  3. Monitor for exploitation attempts
  4. Review access controls

References

Disclaimer

This PoC is for authorized security testing only.

Frequently asked questions

What is CVE-2025-1974?

CVE-2025-1974 is a Critical vulnerability: NGINX Ingress Controller RCE. This entry ships a detection-only PoC.

How do I detect CVE-2025-1974?

Run the detection-only PoC included with this entry against your Docker test lab to confirm whether a target is affected; pair it with your own IDS logging.

How do I block or mitigate CVE-2025-1974?

Upgrade to a fixed version per the vendor advisory; the NVD record lists the affected versions. Use the included PoC to verify your remediation.

For authorized security testing and research only. See the full source and NVD record.