CVE-2021-25742: Kubernetes Ingress-Nginx

High severity, CVSS 7.1. EPSS: 2.1% chance of exploitation in the next 30 days.

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.

Affected products

• Kubernetes Ingress-Nginx: before 0.49.1 (fixed in 0.49.1); version 1.0.0 only
• Netapp Trident: affected versions not specified

Published 2021-10-29. Last modified 2026-06-17.