Command Injection

github.com/gardener/gardenctl-v2 is vulnerable to command injection. The vulnerability is due to improper handling and sanitization of credential values in non-POSIX shells like Fish and PowerShell, which allows an attacker to inject malicious input that escapes string context and executes...

GO-2025-4232 gardenctl is vulnerable to Command Injection when used with non‑POSIX shells in github.com/gardener/gardenctl-v2

gardenctl is vulnerable to Command Injection when used with non‑POSIX shells in github.com/gardener/gardenctl-v2...

gardenctl-v2 命令注入漏洞

gardenctl-v2 is an open source command line client for Gardener. A command injection vulnerability exists in gardenctl-v2 that stems from a non-POSIX shell environment that can forge credential values, potentially leading to credential disclosure...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the evaluation of credential values in non-POSIX shell environments. An attacker can execute arbitrary commands on the operator's device by crafting malicious credential values in infrastructure Secret...