CVE-2025-59823
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64...
Affects 0 products across 4 vendors.
Attacker injects arbitrary code that is executed by the application process.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A critical code injection vulnerability exists in Gardener Extensions for AWS, Azure, OpenStack, and GCP providers prior to specific versions, allowing users with administrative privileges to execute arbitrary code.
BSID: BS-2025-GLOBAL-035449-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-59823?
What is the CVSS score for CVE-2025-59823?
Is CVE-2025-59823 actively exploited?
How do I remediate CVE-2025-59823?
What systems are affected by CVE-2025-59823?
| CVE ID | CVE-2025-59823 |
|---|---|
| BSID | BS-2025-GLOBAL-035449-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| Published | 2025-09-25 |
| Last Modified | 2026-10-11 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Domains | |
| Source | NVD |
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP providers prior to version 1.46.0. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This affects all Gardener installations where Terraformer is used/can be enabled for infrastructure provisioning with any of the affected components. This issue has been patched in Gardener Extensions for AWS providers version 1.64.0, Azure providers version 1.55.0, OpenStack providers version 1.49.0, and GCP providers version 1.46.0.
Source: NIST NVD / MITRE CVE Database
The vulnerability arises from improper validation of user input in the Gardener Extensions, enabling an attacker with administrative privileges to inject malicious code that could be executed in the context of the Gardener service.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Gardener | — | — |
| Kubernetes | — | — |
| Openstack | — | — |
| Project | — | — |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 2b653abec55e395567f0ad7f009663f8c94e6545ef829565ec461bca74b9c1c7571b76e49ef327f27e6990204201dfab5c4c9e9897b27df766671c95dbdea221 |
Critical Severity - Know Your Exposure
A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →