Skip to content
OpenAdvisories

Package · Go

github.com/gardener/gardenctl-v2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.0
    CVE-2025-67508

    gardenctl is vulnerable to Command Injection when used with non‑POSIX shells

    gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privile…

    gardener gardenctl-v2 github.com/gardener/gardenctl-v2 Go