CVE-2018-2475

CVE-2018-2475 describes a missing network isolation vulnerability in Gardener-managed Kubernetes shoot clusters, allowing a shoot's apiserver to access services in the seed cluster's private network. This flaw, when combined with other minor Kubernetes security issues, could theoretically lead to the compromise of other shoot or seed clusters within the Gardener ecosystem. With a CVSS score of 8.5 (HIGH), the vulnerability has a network attack vector, high impact on confidentiality, integrity, and availability, but requires low privileges and high attack complexity. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has garnered some community discussion and media coverage.