CVE-2026-59385

Published: Oct 30, 2026Modified: Oct 30, 2026

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.2 / Impact: 1.4

Source: security@vmware.com (Secondary)

Description

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct reading of broker credentials, making this an indirect extraction method.

Related CWEs

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (1)

https://www.cloudfoundry.org/blog/cve-2026-59385-space-developer-can-extract-space-scoped-broker-credentials/

Source: security@vmware.com

Timeline

No history available yet.