Vulnerability GHSA-9x73-87fh-54w9

Critical

1 year ago

Gardener allows metadata injection for a project secret which can lead to privilege escalation

v0.32.0 - v1.116.3 and v1.117.0 - v1.117.4 and v1.118.0 - v1.118.1

Summary

Gardener allows metadata injection for a project secret which can lead to privilege escalation

Details

A security vulnerability was discovered in the gardenlet component of Gardener. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed.

Am I Vulnerable?

This CVE affects all Gardener installations where https://github.com/gardener/gardener-extension-provider-gcp is in use.

Affected Components

gardener/gardener (gardenlet)

Affected Versions

< v1.116.4
< v1.117.5
< v1.118.2
< v1.119.0

Fixed Versions

>= v1.116.4
>= v1.117.5
>= v1.118.2
>= v1.119.0

How do I mitigate this vulnerability?

Update to a fixed version.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Unknown

7 hours ago

Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

v0.32.0 - v1.152.0 GO-2026-6568

Medium Risk

9 days ago

Gardener: Authorization Bypass via Group Subject Injection

v0.32.0 - v1.142.5 GHSA-gfjv-gqf2-c888

Unknown

1 year ago

Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

v0.32.0 - v1.116.3 GO-2025-3696

Unknown

1 year ago

Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

v0.32.0 - v1.116.3 GO-2025-3698

Critical

1 year ago

Gardener allows bypassing project secret validation which can lead to privilege escalation

v0.32.0 - v1.116.3 and v1.117.0 - v1.117.4 and v1.118.0 - v1.118.1 GHSA-3hw7-qj9h-r835

View all vulnerabilities for these packages

Impacted packages

github.com/gardener/gardener

Timeline

Published

1 year ago

Last Modified

1 year ago