Skip to content
Heist/ feed
Back to feed
Medium

ingress-nginx controller - auth secret file path traversal vulnerability

Type: advisorySources: OSV

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-24513
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 17:16 UTC · Revision 1

Source evidence

ingress-nginx controller - auth secret file path traversal vulnerability

core-osv · Original source

Published 24 Mar 2025, 23:29 UTC

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster.

osv:CVE-2025-24513
Complete source record
{
  "id": "46d2cb96a43d35dbc826081338e3dde63974ad32e94a893d00503118997f3838",
  "url": "https://osv.dev/vulnerability/CVE-2025-24513",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "ingress-nginx controller - auth secret file path traversal vulnerability",
    "summary": "A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster.",
    "evidence": "osv:CVE-2025-24513",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2025-24513",
      "aliases": [
        "CVE-2025-24513",
        "GHSA-242m-6h72-7hgp",
        "GO-2025-3564"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/kubernetes/ingress-nginx",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "9effe56075b11c8123098ccde010b348293737d5"
                },
                {
                  "introduced": "8ee4384271e081578bb8f08eccf2f3b5a78ada25"
                },
                {
                  "last_affected": "8ee4384271e081578bb8f08eccf2f3b5a78ada25"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "1.11.4"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  },
                  {
                    "range": [
                      {
                        "introduced": "1.12.0"
                      },
                      {
                        "last_affected": "1.12.0"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandaloneSingleVersion"
                  }
                ]
              }
            }
          ],
          "versions": [
            "1.12.0",
            "helm-chart-4.11.4",
            "controller-v1.11.4",
            "helm-chart-4.12.0",
            "controller-v1.12.0",
            "helm-chart-4.11.3",
            "controller-v1.11.3",
            "helm-chart-4.11.2",
            "controller-v1.11.2",
            "helm-chart-4.11.1",
            "controller-v1.11.1",
            "controller-v1.10.1",
            "helm-chart-4.10.0",
            "controller-v1.10.0",
            "helm-chart-4.9.1",
            "helm-chart-4.9.0",
            "controller-v1.9.5",
            "helm-chart-4.8.3",
            "controller-v1.9.4",
            "helm-chart-4.8.2",
            "controller-v1.9.3",
            "helm-chart-4.8.1",
            "controller-v1.9.1",
            "helm-chart-4.8.0",
            "controller-v1.9.0-beta.0",
            "helm-chart-4.8.0-beta.0",
            "helm-chart-4.7.2",
            "helm-chart-4.7.1",
            "helm-chart-4.7.0",
            "controller-v1.8.0",
            "helm-chart-4.6.1",
            "controller-v1.7.1",
            "helm-chart-4.6.0",
            "controller-v1.7.0",
            "helm-chart-4.5.2",
            "controller-v1.6.4",
            "helm-chart-4.5.0",
            "helm-chart-4.4.2",
            "helm-chart-4.4.0",
            "controller-v1.5.1",
            "helm-chart-4.3.0",
            "controller-v1.4.0",
            "helm-chart-4.2.5",
            "controller-v1.3.1",
            "helm-chart-4.2.4",
            "helm-chart-4.2.3",
            "helm-chart-4.2.2",
            "helm-chart-4.2.1",
            "helm-chart-4.2.0",
            "controller-v1.3.0",
            "helm-chart-4.1.4",
            "helm-chart-4.1.3",
            "controller-v1.2.1",
            "helm-chart-4.1.2",
            "helm-chart-4.1.1",
            "helm-chart-4.1.0",
            "controller-v1.2.0",
            "helm-chart-4.1.0-beta.1",
            "controller-v1.2.0-beta.1",
            "controller-v1.2.0-beta.0",
            "helm-chart-4.1.0-beta.0",
            "helm-chart-4.0.19",
            "controller-v1.1.3",
            "helm-chart-4.0.18",
            "controller-v1.1.2",
            "helm-chart-4.0.17",
            "helm-chart-4.0.16",
            "helm-chart-4.0.15",
            "controller-v1.1.1",
            "helm-chart-4.0.13",
            "helm-chart-4.0.12",
            "helm-chart-4.0.11",
            "helm-chart-4.0.10",
            "controller-v1.1.0",
            "helm-chart-4.0.9",
            "helm-chart-4.0.8",
            "helm-chart-4.0.7",
            "controller-v1.0.5",
            "helm-chart-4.0.6",
            "controller-v1.0.4",
            "helm-chart-4.0.5",
            "helm-chart-4.0.4",
            "controller-v1.0.3",
            "helm-chart-4.0.3",
            "controller-v1.0.2",
            "helm-chart-4.0.2",
            "controller-v1.0.1",
            "helm-chart-4.0.1",
            "controller-v1.0.0",
            "helm-chart-3.36.0",
            "controller-v0.49.0",
            "helm-chart-3.35.0",
            "controller-v0.48.1",
            "helm-chart-3.34.0",
            "controller-v0.47.0",
            "helm-chart-3.33.0",
            "helm-chart-3.32.0",
            "helm-chart-3.31.0",
            "helm-chart-3.30.0",
            "controller-v0.46.0",
            "helm-chart-3.29.0",
            "helm-chart-3.28.0",
            "controller-v0.45.0",
            "helm-chart-3.27.0",
            "helm-chart-3.26.0",
            "helm-chart-3.24.0",
            "helm-chart-3.25.0",
            "controller-v0.44.0",
            "helm-chart-3.23.0",
            "helm-chart-3.22.0",
            "helm-chart-3.21.0",
            "helm-chart-3.20.1",
            "helm-chart-3.20.0",
            "controller-v0.42.0",
            "controller-v0.43.0",
            "helm-chart-3.19.0",
            "helm-chart-3.18.0",
            "helm-chart-3.17.0",
            "helm-chart-3.16.1",
            "helm-chart-3.16.0",
            "ingress-nginx-3.15.2",
            "ingress-nginx-3.15.1",
            "ingress-nginx-3.15.0",
            "ingress-nginx-3.13.0",
            "ingress-nginx-3.12.0",
            "ingress-nginx-3.11.1",
            "ingress-nginx-3.11.0",
            "controller-v0.41.2",
            "ingress-nginx-3.10.1",
            "controller-v0.41.1",
            "ingress-nginx-3.10.0",
            "ingress-nginx-3.9.0",
            "ingress-nginx-3.8.0",
            "controller-v0.41.0",
            "ingress-nginx-3.7.1",
            "ingress-nginx-3.4.1",
            "ingress-nginx-3.7.0",
            "ingress-nginx-3.6.0",
            "ingress-nginx-3.5.1",
            "ingress-nginx-3.5.0",
            "controller-v0.40.2",
            "ingress-nginx-3.4.0",
            "controller-v0.40.1",
            "ingress-nginx-3.3.1",
            "controller-v0.40.0",
            "ingress-nginx-3.3.0",
            "ingress-nginx-3.2.0",
            "ingress-nginx-3.1.0",
            "ingress-nginx-3.0.0",
            "ingress-nginx-2.16.0",
            "ingress-nginx-2.15.0",
            "ingress-nginx-2.14.0",
            "ingress-nginx-2.13.0",
            "controller-v0.35.0",
            "ingress-nginx-2.12.1",
            "ingress-nginx-2.12.0",
            "ingress-nginx-2.11.3",
            "ingress-nginx-2.11.2",
            "controller-v0.34.1",
            "ingress-nginx-2.11.1",
            "ingress-nginx-2.11.0",
            "controller-v0.34.0",
            "ingress-nginx-2.10.0",
            "ingress-nginx-2.9.1",
            "ingress-nginx-2.9.0",
            "ingress-nginx-2.8.0",
            "ingress-nginx-2.7.1",
            "ingress-nginx-2.7.0",
            "ingress-nginx-2.6.0",
            "ingress-nginx-2.5.0",
            "ingress-nginx-2.4.0",
            "ingress-nginx-2.0.3",
            "ingress-nginx-2.3.0",
            "ingress-nginx-2.2.0",
            "ingress-nginx-2.1.0",
            "ingress-nginx-2.0.2",
            "ingress-nginx-2.0.1",
            "ingress-nginx-2.0.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-24513.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:21.786555925Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24513.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-24513",
        "https://security.netapp.com/advisory/ntap-20250328-0008/",
        "https://github.com/kubernetes/kubernetes/issues/131005",
        "https://github.com/kubernetes/ingress-nginx"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-20"
        ],
        "cna_assigner": "kubernetes",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24513.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-24513",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 487635,
  "published_at": "2025-03-24T23:29:25.215+00:00"
}