CVE-2025-1098

CVE-2025-1098 is a critical security vulnerability in ingress-nginx, where specially crafted `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This flaw can lead to arbitrary code execution within the ingress-nginx controller and disclosure of sensitive Secrets, which by default can include all cluster-wide Secrets. The vulnerability has a CVSS score of 8.8 (HIGH), indicating a severe risk with a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Its EPSS score is exceptionally high, suggesting a significant likelihood of exploitation. While not yet confirmed as actively exploited in the wild (KEV: No), exploit intelligence indicates the availability of Nuclei templates and an ExploitDB entry (EDB-52475) detailing an FD Injection to RCE. The vulnerability has garnered substantial community discussion and media coverage, highlighting its critical nature and potential for widespread impact.