CVE-2021-25742

25

FAUCET Score

CVE-2021-25742 is a high-severity vulnerability in ingress-nginx, affecting Kubernetes ingress-nginx and NetApp Trident, where an authenticated user with ingress object creation/update privileges can leverage the custom snippets feature to exfiltrate all secrets within the cluster. The vulnerability has a CVSS score of 7.1 (High), indicating a low attack complexity and high confidentiality impact, allowing unauthorized access to sensitive information. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion, suggesting awareness among security researchers.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 0.49.1CPE matchmatch criteria	cpe:2.3:a:kubernetes:ingress-nginx::::::::
		1.0.0CPE matchmatch criteria	cpe:2.3:a:kubernetes:ingress-nginx:1.0.0:::::::*
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:netapp:trident:-:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

Exploitability Score

2.8

Impact Score

4.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.78%

Probability of exploitation in next 30 days

EPSS Percentile

76.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0178 is in the 74th percentile among its peer group of 17,844 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

boschpatch availablevia llm_extracted

check_pointpatch availablevia llm_extracted

chromepatch availablevia llm_extracted

infiniflowpatch availablevia llm_extracted

mongodbpatch availablevia llm_extracted

vuepatch availablevia llm_extracted

github_advisoryworkaround availablevia nvd_reference

Vendor Advisories (7)

redhatCVE-2021-25742Important

k8s.io/ingress-nginx: Custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

vuellm-vue-76c703e1e4cfeb5a

Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

boschllm-bosch-ebcdcc29cb1e6bf6

Kubernetes ingress-nginx controller vulnerability (CVE-2021-25742)

chromellm-chrome-4746c42647ee218e

Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

check_pointllm-check_point-8418275777c37073

Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

mongodbllm-mongodb-b808b580e1262723

Kubernetes ingress-nginx controller vulnerability (CVE-2021-25742)

infiniflowllm-infiniflow-3f20ead8c5465342

Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

References

github.com / kubernetes/ingress-nginx/issues/7837

ExploitIssue TrackingMitigationThird Party Advisory

groups.google.com / g/kubernetes-security-announce/c/mT4JJxi9tQY

Mailing ListMitigationThird Party Advisory

security.netapp.com / advisory/ntap-20211203-0001

Third Party Advisory