Vulnerability · Published Oct 30, 2026 · Assigned by vmware
CVE-2026-59385Space Developer can extract space-scoped broker credentials
Low 2.7
In plain English
A low-severity authorization bypass via user-controlled key in CAPI (Cloud Foundry Controller) from Cloud Foundry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct reading of broker credentials, making this an indirect extraction method.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cloud Foundry | CAPI (Cloud Foundry Controller) | 0 – before v1.248.0 |
| Cloud Foundry | CF Deployment | 0 – before 60.9.0 |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N