CVE-2026-3288 — ingress-nginx rewrite-target nginx configuration injection

Description (CNA)

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

Affected (CNA)

Vendor / product	Versions
Kubernetes / ingress-nginx	affected 0 before 1.13.8; affected 0 before 1.14.4; affected 0 before 1.15.0

CWE

CWE-20

References

https://github.com/kubernetes/kubernetes/issues/137560

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/03/09/8

CISA-ADP

No English description supplied.

https://github.com/bvabhishek/CVE-2026-3288-lab