Cloud Foundry Foundation bpm-release

• CVE-2026-47833 Medium 6.1 setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to chown an arbitrary host 0.2%