Severity
High
CVSS score: 2.7 (Low) (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Vendor
Cloud Foundry Foundation
Versions Affected
CAPI (Cloud Foundry Controller)
– Confirmed in CAPI up to v1.247.0 (inclusive)
Description
A SpaceDeveloper could configure the url of a space-scoped broker without changing the credentials. This allows retrieving the credentials of existing space-scoped brokers by changing the url to a broker under the SpaceDevelopers control.
The CF API doesn’t allow reading broker credentials.
Mitigation
Users of affected products are strongly encouraged to follow the mitigations below.
The Cloud Foundry project recommends upgrading the following releases:
CAPI
– Upgrade CAPI to v1.248.0 or greater
CF Deployment
– Upgrade cf-deployment version to v60.9.0 or greater
– Includes CAPI v1.248.0
Credit
This issue was responsibly reported by Minseong Kim (mak3bread).
History
2026-10-20: Initial vulnerability report published.
