What is CVE-2025-24514?
CVE-2025-24514 is a critical vulnerability within the IngressNightmare group, affecting the ingress-nginx Controller for Kubernetes. Successful exploitation of this flaw can lead to a complete cluster takeover. Users are strongly advised to immediately update their ingress-nginx Controller versions.
Azərbaycanca: CVE-2025-24514 IngressNightmare qrupuna aid olan, Kubernetes üçün ingress-nginx Controller-də aşkarlanmış kritik bir boşluqdur. Bu zəiflik, uğurlu istismar edildikdə, klasterin tamamilə ələ keçirilməsinə səbəb ola bilər. İstifadəçilərə dərhal öz ingress-nginx Controller versiyalarını yeniləmələri tövsiyə olunur.
FAQ2
What product is affected by CVE-2025-24514 and what can happen as a result of exploitation?
CVE-2025-24514 affects the ingress-nginx Controller for Kubernetes. Successful exploitation can lead to a complete cluster takeover.
What action is recommended to users regarding CVE-2025-24514?
Users are strongly advised to immediately update their ingress-nginx Controller versions.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.