Wiz Research discovered four Remote Code Execution (RCE) vulnerabilities in Ingress NGINX Controller for Kubernetes, collectively dubbed “IngressNightmare” (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974). Together they allow attackers to inject malicious NGINX configurations and execute arbitrary code, potentially leading to complete cluster takeover, with the unauthenticated CVE-2025-1974 rated at a CVSS v3.1 base score of 9.8. According to the research, approximately 43% of cloud environments are vulnerable, with over 6,500 clusters exposed, including those of Fortune 500 companies. The Kubernetes team provided guidance on CVE-2025-1974, with security researchers sharing detection templates and additional analysis.
