Ingress-nginx rewrite-target vulnerability exposes Kubernetes services to configuration injection

A vulnerability (CVE-2026-3288) in ingress-nginx’s rewrite-target feature enables attackers to inject malicious configurations into Nginx. This flaw arises from improper handling of user-supplied input, allowing unauthorized modifications to the Nginx configuration. The issue poses a medium severity risk, potentially compromising the integrity and security of Kubernetes-managed services. Users are advised to apply patches or updates as soon as they become available to mitigate the risk.