Kubernetes Ingress-NGINX Controller Arbitrary Code Execution Vulnerability

A vulnerability in Kubernetes allows an unauthenticated attacker with access to the pod network to execute arbitrary code within the ingress-nginx controller. This issue could result in the unauthorized disclosure of Secrets that the controller can access. In a default installation, the controller has access to all Secrets across the cluster.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the ingress-nginx controller, allowing for the unauthorized access and disclosure of cluster-wide Secrets.