Incident Library

Organisation

Wiz

Wiz · wiz

1 case · 2025

Root cause Software defect
Component Admission webhookIngress controller
Contributing factor Excessive blast radiusUnreviewed defaults
Symptom Unauthorised access or a foreign workload

Cases

  1. IL-0053 Unauthenticated ingress-nginx admission webhook let anyone on the pod network run code and read every Secret in the cluster (IngressNightmare, CVE-2025-1974)Wiz · 2025

    Root cause Software defect