PT-2025-22074 · Gardener · Gardener

Rfranzke · Published 2025-05-19 · Updated 2026-02-06 · CVE-2025-47283

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Gardener versions prior to 1.116.4 Gardener versions prior to 1.117.5 Gardener versions prior to 1.118.2 Gardener versions prior to 1.119.0

Description: A security issue was discovered in Gardener that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. The affected component is gardener/gardener (gardenlet). This issue affects all Gardener installations, regardless of the public cloud provider(s) used for the seed clusters/shoot clusters.

Recommendations: For versions prior to 1.116.4, update to version 1.116.4 or later. For versions prior to 1.117.5, update to version 1.117.5 or later. For versions prior to 1.118.2, update to version 1.118.2 or later. For versions prior to 1.119.0, update to version 1.119.0 or later.

Exploit

Fix

Improper Privilege Management

RCE

Weakness Enumeration

CWE-269

CWE-20

Related Identifiers

CVE-2025-47283

GHSA-3HW7-QJ9H-R835

GO-2025-3696

OPENSUSE-SU-2025:15159-1

Affected Products

Gardener

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47283.json · Exploit
• https://osv.dev/vulnerability/GHSA-3hw7-qj9h-r835 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-47283 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15159-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47283 · Security Note
• https://github.com/gardener/gardener/security/advisories/GHSA-3hw7-qj9h-r835 · Note
• https://github.com/gardener/gardener/commit/cf4e9887d83902216b85609caf563f7a9dd2de00 · Note
• https://github.com/gardener/gardener/commit/b89cf2cd5067e82f364063d5241af73650a6e11d · Note
• https://github.com/gardener/gardener/commit/924b1575aae052bcda5a51fac8594d38fa3c41b0 · Note
• https://github.com/gardener/gardener/commit/bbd19b1dd3a31843d7b820172d37f75298dfaf8b · Note
• https://github.com/gardener/gardener · Note
• https://suse.com/security/cve/CVE-2025-47284 · Note
• https://suse.com/security/cve/CVE-2025-47291 · Note
• https://suse.com/security/cve/CVE-2025-48069 · Note