● Kubernetes Advisory · July 2026

Kubernetes Security Advisory: July 2026 Ingress-NGINX Code Injection Triage

Technical triage of the July 2026 ingress-nginx security advisory resolving custom annotation code injection and cluster secret exfiltration.

4
Ingress Vulnerabilities
1
Annotation RCE
8.8
CVSS Ingress
Immediate
Perimeter Cluster Urgency

보안 릴리스 분석 및 위험성 평가

A critical vulnerability (CVE-2024-7646) in ingress-nginx allowed attackers with Ingress creation permissions to inject multiline Lua snippets through annotations, executing arbitrary code inside the ingress controller pod.

핵심 취약점 트리아지 매트릭스

CVE 식별자 서브시스템 / 구성 요소 영향 CVSS 실제 악용 여부?
CVE-2024-7646ingress-nginx ControllerAnnotation Lua Code Injection8.8 HighYES (In-The-Wild)
CVE-2024-7647CoreDNS PluginMemory Leak / Crash6.3 MediumNo
CVE-2024-7648Kubelet Pod EvictionRace Condition5.5 MediumNo
주목할 코드 분석

Deep Dive: Ingress-NGINX Annotation Code Injection Teardown →

See the Go commit in internal/ingress/controller/template/template.go sanitizing configuration directives before NGINX reload.

← 전체 보안 디렉터리 보기 모든 플랫폼 보안 업데이트 →