Skip to content
OpenAdvisories

Vendor

gardener

6 known vulnerabilities.

Products

gardener 3 gardenctl-v2 1 gardener-extension-provider-aws 1 external-dns-management 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2025-67508

    gardenctl is vulnerable to Command Injection when used with non‑POSIX shells

    gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privile…

    gardener gardenctl-v2 github.com/gardener/gardenctl-v2 Go