ingress-nginx admission controller RCE escalation

configuration injection via unsanitized mirror annotations

configuration injection via unsanitized auth-tls-match-cn annotation

configuration injection via unsanitized auth-url annotation

auth secret file path traversal vulnerability

GitRepo Volume Inadvertent Local Repository Access

Node Denial of Service via kubelet Checkpoint API

Command Injection affecting Windows nodes via nodes/*/logs/query API

Arbitrary command execution through gitRepo volume

VM images built with Image Builder with some providers use default credentials during builds

VM images built with Image Builder and Proxmox provider use default credentials

Ingress-nginx Annotation Validation Bypass

Network restriction bypass via race condition during namespace termination

Incorrect permissions on Windows containers logs

azure-file-csi-driver discloses service account tokens in logs

Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

Ingress nginx annotation injection causes arbitrary command execution

ingress-nginx path sanitization can be bypassed

Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation