{"id":"CVE-2025-47283","aliases":["EUVD-2025-15799","GHSA-3hw7-qj9h-r835","GO-2025-3696","openSUSE-SU-2025:15159-1"],"status":"published","title":"Bypassing project secret validation can lead to privilege escalation","description":"Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.","severity":{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00677,"percentile":0.52602,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-269"],"published":"2025-05-19T18:46:11Z","modified":"2026-10-28T02:30:27Z","fixes":[{"ecosystem":"Go","package":"github.com/gardener/gardener","fixed_in":["1.116.4","1.117.5","1.118.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/gardener/gardener","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.116.4"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gardener/gardener","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.117.0"},{"fixed":"1.117.5"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/gardener/gardener","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.118.0"},{"fixed":"1.118.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gardener/gardener","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.116.4"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gardener/gardener","ranges":[{"type":"SEMVER","events":[{"introduced":"1.117.0"},{"fixed":"1.117.5"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gardener/gardener","ranges":[{"type":"SEMVER","events":[{"introduced":"1.118.0"},{"fixed":"1.118.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/gardener/gardener","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.116.4"},{"introduced":"1.117.0"},{"fixed":"1.117.5"},{"introduced":"1.118.0"},{"fixed":"1.118.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250523T151856-1.1"}]}],"bundled":14}],"products":[{"vendor":"gardener","product":"gardener"}],"references":[{"url":"https://github.com/gardener/gardener/security/advisories/GHSA-3hw7-qj9h-r835","tags":["x_refsource_CONFIRM","Third Party Advisory","advisory","web"]},{"url":"https://github.com/gardener/gardener/commit/924b1575aae052bcda5a51fac8594d38fa3c41b0","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/gardener/gardener/commit/b89cf2cd5067e82f364063d5241af73650a6e11d","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/gardener/gardener/commit/bbd19b1dd3a31843d7b820172d37f75298dfaf8b","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/gardener/gardener/commit/cf4e9887d83902216b85609caf563f7a9dd2de00","tags":["x_refsource_MISC","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47283","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3hw7-qj9h-r835"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47283.json","tags":["advisory"]},{"url":"https://github.com/gardener/gardener","tags":["package"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBVOKYMJCE2HZLSF5W3H3Q7KEHMMOQR3/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5031","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-47283","title":"Bypassing project secret validation can lead to privilege escalation","description":"Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.","status":"published","published":"2025-05-19T18:46:11.863Z","modified":"2026-02-06T18:56:18.344Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:32:26.320248Z"}],"euvd":[{"id":"EUVD-2025-15799","description":"Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.","status":"published","published":"2025-05-19T18:46:11Z","modified":"2026-02-06T18:56:18Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:42.836553Z"}],"ghsa":[{"id":"GHSA-3hw7-qj9h-r835","title":"Gardener allows bypassing project secret validation which can lead to privilege escalation","description":"A security vulnerability was discovered in Gardener that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed.\n\n### Am I Vulnerable?\n\nThis CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters.\n\n### Affected Components\n\n- `gardener/gardener`\n\n### Affected Versions\n\n- \u003c v1.116.4\n- \u003c v1.117.5\n- \u003c v1.118.2\n- \u003c v1.119.0\n\n### Fixed Versions\n\n- \u0026gt;= v1.116.4\n- \u0026gt;= v1.117.5\n- \u0026gt;= v1.118.2\n- \u0026gt;= v1.119.0\n\n### How do I mitigate this vulnerability?\n\nUpdate to a fixed version.","status":"published","published":"2025-05-19T19:15:03Z","modified":"2026-02-06T18:56:42Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20","CWE-269"],"updated_at":"2026-11-02T14:39:23.728882Z"}],"nvd":[{"id":"CVE-2025-47283","description":"Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.","status":"published","published":"2025-05-19T19:15:51.747Z","modified":"2026-06-17T09:27:39.887Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:11:09.125937Z"}],"osv":[{"id":"CVE-2025-47283","title":"Bypassing project secret validation can lead to privilege escalation","description":"Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.","status":"published","published":"2025-05-19T18:46:11.863Z","modified":"2026-10-28T02:30:27.282179342Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"GHSA-3hw7-qj9h-r835","title":"Gardener allows bypassing project secret validation which can lead to privilege escalation","description":"A security vulnerability was discovered in Gardener that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed.\n\n### Am I Vulnerable?\n\nThis CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters.\n\n### Affected Components\n\n- `gardener/gardener`\n\n### Affected Versions\n\n- \u003c v1.116.4\n- \u003c v1.117.5\n- \u003c v1.118.2\n- \u003c v1.119.0\n\n### Fixed Versions\n\n- \u0026gt;= v1.116.4\n- \u0026gt;= v1.117.5\n- \u0026gt;= v1.118.2\n- \u0026gt;= v1.119.0\n\n### How do I mitigate this vulnerability?\n\nUpdate to a fixed version.","status":"published","published":"2025-05-19T19:15:03Z","modified":"2026-02-06T20:16:27.773937Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20","CWE-269"],"updated_at":"2026-11-02T15:46:35.747385Z"},{"id":"GO-2025-3696","title":"Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener","description":"Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener","status":"published","published":"2025-05-23T15:17:19Z","modified":"2026-03-03T04:56:35.78565Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"openSUSE-SU-2025:15159-1","title":"govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250523T151856-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-26T00:00:00Z","modified":"2026-03-23T04:53:25.486565Z","updated_at":"2026-11-02T16:58:37.399567Z"}]}}