CVE-2021-23021: F5 Nginx Controller

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.

Affected products

• F5 Nginx Controller: from 3.0.0, before 3.7.0 (fixed in 3.7.0)

Published 2021-06-01. Last modified 2026-06-17.