Cloud Foundry Foundation CAPI (Cloud Foundry Controller) vulnerabilities (CVE)

CVE records published for Cloud Foundry Foundation CAPI (Cloud Foundry Controller), newest first. Follow to get an email when a new one appears.

2 results

2.7Low

CVE-2026-59385 13 days ago

Space Developer can extract space-scoped broker credentials

Cloud Foundry CAPI (Cloud Foundry Controller); Cloud Foundry CF Deployment

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct rea…

6.5Medium

CVE-2026-59388 13 days ago

Cloud Controller exposes secrets in audit log

Cloud Foundry Foundation CAPI (Cloud Foundry Controller); Cloud Foundry Foundation cf-deployment

Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exposed in audit events for app manifest application, creation, and updates; syslog drain URL credentials are exposed in user-provided service…