CVE-2025-59823

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-59823
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-59823.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-59823
Aliases
Downstream
Related
Published
2025-09-25T14:17:37Z
Modified
2025-11-01T16:19:13.237185Z
Severity
  • 9.9 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning
Details

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP providers prior to version 1.46.0. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This affects all Gardener installations where Terraformer is used/can be enabled for infrastructure provisioning with any of the affected components. This issue has been patched in Gardener Extensions for AWS providers version 1.64.0, Azure providers version 1.55.0, OpenStack providers version 1.49.0, and GCP providers version 1.46.0.

Database specific 
{
    "cwe_ids": [
        "CWE-94"
    ]
}
References

Affected packages

Git

github.com/gardener/gardener-extension-provider-gcp

Affected ranges

Type
GIT
Repo
https://github.com/gardener/gardener-extension-provider-gcp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
27fcec2a9fd2b01a0707d0e3d983243fe266cb95

Affected versions

v1.*

v1.10.0
v1.11.0
v1.12.0
v1.13.0
v1.14.0
v1.15.0
v1.16.0
v1.17.0
v1.18.0
v1.19.0
v1.20.0
v1.21.0
v1.22.0
v1.23.0
v1.24.0
v1.25.0
v1.26.0
v1.27.0
v1.28.0
v1.29.0
v1.3.0
v1.30.0
v1.30.1
v1.31.0
v1.32.0
v1.33.0
v1.34.0
v1.35.0
v1.36.0
v1.37.0
v1.38.0
v1.39.0
v1.4.0
v1.40.0
v1.41.0
v1.42.0
v1.43.0
v1.44.0
v1.45.0
v1.5.0
v1.6.0
v1.7.0
v1.8.0
v1.9.0

github.com/gardener/gardener-extension-provider-openstack

Affected ranges

Type
GIT
Repo
https://github.com/gardener/gardener-extension-provider-openstack
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b64320a701a37eb96c50ce59e11d1a3b94335d59

Affected versions

v1.*

v1.10.0
v1.11.0
v1.12.0
v1.13.0
v1.14.0
v1.15.0
v1.16.0
v1.17.0
v1.18.0
v1.19.0
v1.20.0
v1.21.0
v1.22.0
v1.23.0
v1.24.0
v1.25.0
v1.26.0
v1.27.0
v1.28.0
v1.29.0
v1.3.0
v1.30.0
v1.31.0
v1.32.0
v1.33.0
v1.34.0
v1.35.0
v1.36.0
v1.37.0
v1.38.0
v1.39.0
v1.4.0
v1.40.0
v1.41.0
v1.42.0
v1.43.0
v1.44.0
v1.45.0
v1.46.0
v1.47.0
v1.48.0
v1.5.0
v1.6.0
v1.7.0
v1.8.0
v1.9.0

github.com/gardener/gardener-extension-provider-aws

Affected ranges

Type
GIT
Repo
https://github.com/gardener/gardener-extension-provider-aws
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
094f43378798696c55eebf0006072bcf58e70ee4

Affected versions

v1.*

v1.10.0
v1.11.0
v1.12.0
v1.13.0
v1.14.0
v1.15.0
v1.16.0
v1.17.0
v1.18.0
v1.19.0
v1.20.0
v1.21.0
v1.22.0
v1.23.0
v1.24.0
v1.25.0
v1.26.0
v1.27.0
v1.28.0
v1.29.0
v1.3.0
v1.30.0
v1.31.0
v1.32.0
v1.33.0
v1.34.0
v1.35.0
v1.36.0
v1.37.0
v1.38.0
v1.39.0
v1.4.0
v1.40.0
v1.41.0
v1.42.0
v1.43.0
v1.44.0
v1.45.0
v1.46.0
v1.47.0
v1.48.0
v1.49.0
v1.5.0
v1.50.0
v1.51.0
v1.52.0
v1.53.0
v1.54.0
v1.55.0
v1.56.0
v1.57.0
v1.58.0
v1.59.0
v1.6.0
v1.60.0
v1.61.0
v1.62.0
v1.63.0
v1.63.0-dev
v1.7.0
v1.8.0
v1.9.0

github.com/gardener/gardener-extension-provider-azure

Affected ranges

Type
GIT
Repo
https://github.com/gardener/gardener-extension-provider-azure
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
30e3c13c8967564a6e803a091f16ec189c1a60a9

Affected versions

v1.*

v1.10.0
v1.11.0
v1.12.0
v1.13.0
v1.14.0
v1.15.0
v1.16.0
v1.17.0
v1.18.0
v1.19.0
v1.20.0
v1.21.0
v1.22.0
v1.23.0
v1.24.0
v1.25.0
v1.26.0
v1.27.0
v1.28.0
v1.29.0
v1.3.0
v1.30.0
v1.31.0
v1.32.0
v1.33.0
v1.34.0
v1.35.0
v1.36.0
v1.37.0
v1.38.0
v1.39.0
v1.4.0
v1.40.0
v1.41.0
v1.42.0
v1.43.0
v1.44.0
v1.45.0
v1.46.0
v1.47.0
v1.48.0
v1.49.0
v1.5.0
v1.50.0
v1.51.0
v1.52.0
v1.53.0
v1.54.0
v1.6.0
v1.7.0
v1.8.0
v1.9.0