CVE-2020-5866: F5 Nginx Controller

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments.

Affected products

• F5 Nginx Controller: from 2.0.0, up to and including 2.9.0; from 3.0.0, before 3.3.0 (fixed in 3.3.0); version 1.0.1 only

Published 2020-04-23. Last modified 2026-06-17.