CVE-2025-47284
Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the gardenlet component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations where gardener/gardener-extension-provider-gcp is in use. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.
| Software | From | Fixed in |
|---|---|---|
github.com/gardener/gardener
|
- | 1.116.4 |
|
github.com/gardener/gardener
|
1.117.0 | 1.117.5 |
|
github.com/gardener/gardener
|
1.118.0 | 1.118.2 |
| gardener / gardener | - | 1.116.4 |
| gardener / gardener | 1.117.0 | 1.117.5 |
| gardener / gardener | 1.118.0 | 1.118.2 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime