Skip to content

Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Disclosed bug bounty reports
Report	Status	Weakness	Severity	Disclosed	Bounty	Votes
Node disk DOS by writing to container /etc/hostsAnalysed#867699	Valid	Denial of Service	Medium	2020-07-22	$1,000	161
Injection in path parameter of Ingress-nginxAnalysed#2701701	Valid	Command and Code Injection	High	2026-03-07	–	91
Bypass validation parts in AWS IAM Authenticator for KubernetesAnalysed#1580493	Valid	Authentication	High	2023-05-25	$2,500	68
Ingress nginx annotation injection causes arbitrary command executionAnalysed#1728174	Valid	Command and Code Injection	High	2023-11-24	$2,500	57
Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespacesAnalysed#1249583	Valid	Access Control	High	2021-12-04	–	55
Privilege Escalation in kOps using GCE/GCP ProviderAnalysed#1842829	Valid	Access Control	High	2023-08-04	$2,500	52
RCE on ingress-nginx-controller via Ingress spec.rules.http.paths.path fieldAnalysed#1620702	Valid	Command and Code Injection	High	2023-10-26	$2,500	47
Loading YAML in Java client can lead to command executionAnalysed#1167773	Valid	Deserialization and Object Injection	Medium	2021-08-07	$1,000	45
Code inject via nginx.ingress.kubernetes.io/permanent-redirect annotationAnalysed#2039464	Valid	Command and Code Injection	High	2023-10-25	$2,500	40
Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespacesAnalysed#1378175	Valid	Command and Code Injection	High	2022-08-13	–	34
SSRF for kube-apiserver cloudprovider sceneAnalysed#941178	Valid	Server-Side Request Forgery	Medium	2021-10-07	–	24
Half-Blind SSRF found in kube/cloud-controller-manager can be upgraded to complete SSRF (fully crafted HTTP requests) in vendor managed k8s service.Analysed#776017	Valid	Server-Side Request Forgery	High	2020-10-30	$5,000	21
Ingress-nginx path allows retrieval of ingress-nginx serviceaccount tokenAnalysed#1382919	Valid	Access Control	High	2022-08-06	$2,500	17
Code Injection via Insecure Yaml.loadAnalysed#1051192	Valid	Command and Code Injection	Low	2021-05-01	$250	17

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report, where there is one, which can be wrong. Data as of 2026-11-15.