CRITICAL INGRESS NGINX CONTROLLER VULNERABILITY ALLOWS RCE WITHOUT AUTHENTICATION

Summary from the TLDR InfoSec newsletter

Five vulnerabilities in the NGINX Ingress Admission Controller, called IngressNightmare, enable remote code execution without authentication. Attackers can inject harmful configurations to compromise Kubernetes environments via the admission controller.