A flaw in F5 BIG‑IP Container Ingress Services permits an attacker to read cluster secrets that should be protected, exposing critical credentials and configuration data. The vulnerability arises from excessive permissions granted to the ingress services, allowing read access to privileged secrets. The direct consequence is the loss of confidentiality for system secrets, potentially enabling credential theft and further compromise.

The issue affects F5’s BIG‑IP Container Ingress Services, though specific affected version numbers are not disclosed. Software versions that have reached End of Technical Support are not evaluated. No other vendors or products are listed as affected.

The CVSS score of 6.9 indicates moderate severity, while the EPSS score of less than 1% suggests a low probability of exploitation at this time. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation would likely require network access to the ingress service or the ability to send specially crafted requests, and it relies on the attacker already having some level of access to the cluster environment.