GitStock

gardener/gardener · Security

Gardener allows metadata injection for a project secret which can lead to privilege escalation

Open GitHub
GHSA ID
GHSA-9x73-87fh-54w9
CVE ID
CVE-2025-47284
Severity
critical
Published
Updated
CVSS
9.9 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v3
9.9 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

A security vulnerability was discovered in the gardenlet component of Gardener. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed.

Am I Vulnerable?

This CVE affects all Gardener installations where https://github.com/gardener/gardener-extension-provider-gcp is in use.

Affected Components

  • gardener/gardener (gardenlet)

Affected Versions

  • < v1.116.4
  • < v1.117.5
  • < v1.118.2
  • < v1.119.0

Fixed Versions

  • >= v1.116.4
  • >= v1.117.5
  • >= v1.118.2
  • >= v1.119.0

How do I mitigate this vulnerability?

Update to a fixed version.

CWEs

  • CWE-150 · Improper Neutralization of Escape, Meta, or Control Sequences

References