Ronen Shustin
@ronenshh
This was a huge effort from the team. With every small primitive we discovered, we got closer—until we finally landed a full unauthenticated RCE. I had a ton of fun working on this research. ☸️👇
Nir Ohfeld@nirohfeld · Mar 25, 2025We (+@sagitz_ @ronenshh @hillai) found a series of unauthenticated RCEs in core @kubernetesio project "Ingress-NGINX".
The impact?
From zero permissions ➡️ to complete cluster takeover 🤯
This is the story of #IngressNightmare 🧵⬇️
The impact?
From zero permissions ➡️ to complete cluster takeover 🤯
This is the story of #IngressNightmare 🧵⬇️
Open quoted post →
3 49