PT-2025-50882 · Gardenctl · Gardenctl

Published 2025-12-11 · Updated 2026-01-06 · CVE-2025-67508

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions gardenctl versions 2.11.0 and below

Description gardenctl is a command-line client for Gardener, used for configuring access to clusters and cloud provider CLI tools. When used with non-POSIX shells like Fish and PowerShell, versions 2.11.0 and below allow an attacker with administrative privileges for a Gardener project to create malicious credential values. These values are placed in infrastructure Secret objects and can break out of the intended string context when evaluated in Fish or PowerShell environments used by Gardener service operators. The issue involves the manipulation of credential values within Secret objects, potentially leading to unauthorized actions.

Recommendations Update to gardenctl version 2.12.0 or later.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-67508

GHSA-FW33-QPX7-RHX2

GO-2025-4232

SUSE-SU-2026:0037-1

Affected Products

Gardenctl

References · 89

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67508.json · Exploit
• https://github.com/gardener/gardenctl-v2/security/advisories/GHSA-fw33-qpx7-rhx2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-67508 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67508 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0037-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fw33-qpx7-rhx2 · Vendor Advisory
• https://github.com/gardener/gardenctl-v2 · Note
• https://suse.com/security/cve/CVE-2025-68941 · Note
• https://suse.com/security/cve/CVE-2025-67508 · Note
• https://suse.com/security/cve/CVE-2025-10543 · Note
• https://suse.com/security/cve/CVE-2025-60633 · Note
• https://suse.com/security/cve/CVE-2025-68939 · Note
• https://suse.com/security/cve/CVE-2025-65637 · Note
• https://suse.com/security/cve/CVE-2025-66508 · Note