A directory traversal vulnerability exists in the ingress-nginx Admission Controller where attacker-controlled data is used in a filename, potentially allowing denial of service or limited disclosure of Secret objects when combined with other vulnerabilities. This affects ingress-nginx versions prior to 1.11.5 and versions from 1.12.0-beta.0 up to but not including 1.12.1. The issue has been assigned CVE-2025-24513 and has a medium severity rating with a CVSS score of 4.8. Fixed versions 1.11.5 and 1.12.1 are available.