Gardener vulnerabilities
We track 5 vulnerabilities in Gardener products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on December 12, 2025.
Latest Gardener vulnerabilities
- 8.4 High severity
gardenctl-v2: Improper Neutralization of Special Elements used in a Command
gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privileg
- 9.9 Critical severity
gardener-extension-provider-aws: Improper Control of Generation of Code
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack provider
- 9.9 Critical severity
gardener: Improper Neutralization of Escape, Meta, or Control Sequences
Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user wit
- 9.9 Critical severity
Gardener implements the automated management and operation of Kubernetes clusters as a service.
Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges
- 9.9 Critical severity
Gardener External DNS Management is an environment to manage external DNS entries for a…
Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privil