CVE-2025-47284 - CVE House
Back to Database
Status published Critical CVE-2025-47284

Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation

Vulnerability Description

Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations where gardener/gardener-extension-provider-gcp is in use. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47284

Credits & Attribution

No credits recorded in the NVD database.

References

More from gardener

View All →
CVE-2025-67508
gardenctl is vulnerable to Command Injection when used with non‑POSIX shells
High 8
CVE-2025-59823
Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning
Critical 9.9
CVE-2025-47283
Bypassing project secret validation can lead to privilege escalation
Critical 9.9
CVE-2025-47282
Malicious google credential in DNS secret can lead to privilege escalation
Critical 9.9
CVE-2019-12494
In Gardener before 0.20.0, incorrect access control in seed clusters...
High 8.5

Affected Vendor

Affected Software

gardener
Vulnerable Versions:
< 1.116.4, >= 1.117.0, < 1.117.5, >= 1.118.0, < 1.118.2

Timeline

Official Publish: May 19th, 2025
Last Modified: May 20th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-150

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.