{"affected":[{"defaultStatus":"unaffected","product":"ingress-nginx","source":"CNA: kubernetes","vendor":"Kubernetes","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Rancher Prime RKE2 ingress-nginx","source":"CNA: kubernetes","vendor":"SUSE","versions":[{"lessThan":"1.15.2-prime1","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-116472","cwes":["CWE-20"],"description":"A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected if they are using ingress-nginx.\n\nDue to a missing check, the mirror-target Ingress annotation can be used to target an unauthenticated configuration API within the ingress-nginx controller, allowing write commands to be submitted. Corrupting the data within that configuration API results in all traffic through ingress-nginx being dropped until an Ingress configuration change or a controller restart causes the data to be recreated correctly.\n\nIn principle, this write access could also be used to redirect traffic from other Ingresses controlled by the same ingress-nginx instance. In practice, there is negligible additional risk: such redirection would require privileged information about internal ingress-nginx state, and users can already redirect traffic from other Ingresses controlled by the same ingress-nginx anyway.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":2.7,"severity":"low","source":"CNA: kubernetes","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1793916345488,"publishedAt":1793902409564,"references":[{"source":"CNA: kubernetes","tags":["vendor-advisory"],"url":"https://github.com/kubernetes/kubernetes/issues/143852"},{"source":"ADP: CVE","tags":[],"url":"http://www.openwall.com/lists/oss-security/2026/11/05/4"}],"remediation":[],"revision":"d58b71b425c2b9086e89d76d2844d6794679d42c19066ea4b2ee74b8c0b88397","sources":[{"modifiedAt":1793916345488,"name":"CNA: kubernetes","retrievedAt":1793920109395,"url":"https://www.cve.org/CVERecord?id=CVE-2026-116472"}],"ssvc":null,"status":"published","title":"ingress-nginx mirror-target self-DOS","updatedAt":1793920109395}