CVE-2026-3288

Published: Mar 9, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: jordan@liggitt.net (Secondary)

Description

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

Affected (2)

Products: Kubernetes: Ingress Nginx

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Kubernetes Ingress Nginx	Before 1.13.8
Kubernetes Ingress Nginx	From 1.14.0 to 1.14.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (3)

https://github.com/kubernetes/kubernetes/issues/137560

Source: jordan@liggitt.net

Issue TrackingThird Party Advisory

http://www.openwall.com/lists/oss-security/2026/03/09/8

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://github.com/bvabhishek/CVE-2026-3288-lab

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

MitigationThird Party Advisory

Timeline

No history available yet.