ExploitPublished
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 10 Apr 2026, 00:24 UTC
What to do
AI-suggested
Until an official fix is available, consider restricting access to the Ingress-NGINX Admission Controller and monitoring for suspicious activity related to file descriptor injection attempts.
Description
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
Indicators of compromise
Exploit source code
# Exploit Title: Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
# Date: 2025-10-07
# Exploit Author: Beatriz Fresno Naumova
# Vendor Homepage: https://kubernetes.io
# Software Link: https://github.com/kubernetes/ingress-nginx
# Version: Affects v1.10.0 to v1.11.1 (potentially others)
# Tested on: Ubuntu 22.04, RKE2 Kubernetes Cluster
# CVE: CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974
import os
import sys
import socket
import requests
import threading
from url…References
Community reviews
Loading reviews…