Low severity · published Oct 30, 2026
CVE-2026-59385
Space Developer can extract space-scoped broker credentials
New
2.7
CVSS
–
EPSS
No
On KEV
Description
A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct reading of broker credentials, making this an indirect extraction method.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
CAPI (Cloud Foundry Controller) · Cloud Foundry
before v1.248.0 · source: vendor
CD
CF Deployment · Cloud Foundry
before 60.9.0 · source: vendor
Affected product
CC
CAPI (Cloud Foundry Controller)
Cloud Foundry