CVE-2025-1974

CRITICAL

CVSS v3

9.8

CRITICAL

EPSS Score

89.8%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

Technical Details

Published
3/25/2025

Frequently Asked Questions

What is CVE-2025-1974?

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

Is CVE-2025-1974 actively exploited?

Active exploitation of CVE-2025-1974 has not been confirmed. The EPSS score is 89.8%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2025-1974?

CVE-2025-1974 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2025-1974 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.