A vulnerability in ingress-nginx allows an attacker to inject configuration via the unsanitized auth-tls-match-cn annotation. This can lead to arbitrary code execution within the ingress-nginx controller and disclosure of Secrets accessible to the controller, which by default has cluster-wide Secret access. Fixed versions 1.11.5 and 1.12.1 address this issue.