CVE-2026-3288

HIGH LAB

ingress-nginx - Code Injection

Title source: llm

Description

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

Exploits (3)

github WRITEUP 10 stars

by XiaomingX · pythonpoc

https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2026/CVE-2026-3288

View Code ZIP pw:eip

nomisec WORKING POC

by bvabhishek · poc

https://github.com/bvabhishek/CVE-2026-3288-lab

View Code ZIP pw:eip

nomisec WRITEUP

by SnailSploit · poc

https://github.com/SnailSploit/CVE-2026-3288

View Code ZIP pw:eip

References (2)

[Issue Tracking] https://github.com/kubernetes/kubernetes/issues/137560

[Mailing List] http://www.openwall.com/lists/oss-security/2026/03/09/8

Scores

CVSS v3 8.8

EPSS 0.0005

EPSS Percentile 16.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Lab Environment

COMMUNITY

Community Lab

docker pull nginx:1.25-alpine

https://github.com/SnailSploit/CVE-2026-3288

https://github.com/XiaomingX/data-cve-poc-py-v1

https://github.com/bvabhishek/CVE-2026-3288-lab

View in Library

Details

CWE

CWE-20

Status published

Products (3)

Kubernetes/ingress-nginx < 1.13.8

Kubernetes/ingress-nginx < 1.14.4

Kubernetes/ingress-nginx < 1.15.0

Published Mar 09, 2026

Tracked Since Mar 10, 2026