● Kubernetes Advisory · July 2026

Kubernetes Security Advisory: July 2026 Ingress-NGINX Code Injection Triage

Technical triage of the July 2026 ingress-nginx security advisory resolving custom annotation code injection and cluster secret exfiltration.

4
Ingress Vulnerabilities
1
Annotation RCE
8.8
CVSS Ingress
Immediate
Perimeter Cluster Urgency

Анализ рисков и вердикт безопасности

A critical vulnerability (CVE-2024-7646) in ingress-nginx allowed attackers with Ingress creation permissions to inject multiline Lua snippets through annotations, executing arbitrary code inside the ingress controller pod.

Матрица приоритизации уязвимостей

Идентификатор CVE Подсистема / Компонент Последствия CVSS Активная эксплуатация?
CVE-2024-7646ingress-nginx ControllerAnnotation Lua Code Injection8.8 HighYES (In-The-Wild)
CVE-2024-7647CoreDNS PluginMemory Leak / Crash6.3 MediumNo
CVE-2024-7648Kubelet Pod EvictionRace Condition5.5 MediumNo
РАЗБОР ИСХОДНОГО КОДА

Deep Dive: Ingress-NGINX Annotation Code Injection Teardown →

See the Go commit in internal/ingress/controller/template/template.go sanitizing configuration directives before NGINX reload.

← Полный каталог уязвимостей Все бюллетени безопасности →