ingress-nginx < 1.13.8, < 1.14.4, < 1.15.0 - Remote Code Execution via Rewrite Target Annotation Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2026-3288. PoCs published by XiaomingX, bvabhishek, SnailSploit.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2026-3288, an ingress-nginx configuration injection vulnerability via the rewrite-target annotation, including root cause, affected versions, remediation steps, and detection methods.
Description
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
Exploits (3)
This repository provides a detailed technical analysis of CVE-2026-3288, an ingress-nginx configuration injection vulnerability via the rewrite-target annotation, including root cause, affected versions, remediation steps, and detection methods.
This repository contains a functional exploit PoC for CVE-2026-3288, an NGINX Ingress Controller configuration injection vulnerability. The lab includes a Docker-based vulnerable environment, automated exploitation scripts, and detailed documentation for testing various attack scenarios.
This repository provides a detailed technical analysis of CVE-2026-3288, an ingress-nginx configuration injection vulnerability via the rewrite-target annotation, including root cause, affected versions, remediation steps, and detection methods.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H