Cloud Foundry Foundation

13 CVEs across 9 Cloud Foundry Foundation products. Browse Cloud Foundry Foundation vulnerabilities, severities, and proof-of-concept exploits.

Cloud Foundry Foundation products with known CVEs

ProductCVEs
Bosh3
Bosh Director3
Bosh-Windows-Stemcell-Builder2
Cf Deployment2
Bosh Cli1
Bpm-Release1
Log-Cache Release1
Uaa Release1
Windows-Utilities-Release1
Cloud Foundry Foundation CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-47827High7.52026-08-21Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabiliti…
CVE-2026-47831High7.52026-07-09Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to bru…
CVE-2026-47830High8.82026-07-09Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bos…
CVE-2026-47833Medium6.12026-06-18setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container…
CVE-2026-41010High8.22026-06-04ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_m…
CVE-2026-41860High8.82026-06-04CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #s…
CVE-2026-41859High7.82026-06-04A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper…
CVE-2026-41858High7.52026-06-04Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to e…
CVE-2026-41011High8.22026-06-04PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes…
CVE-2026-40965Critical10.02026-06-01Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) pr…
CVE-2026-40964High7.52026-06-01Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log…
CVE-2026-41704Medium5.02026-05-27AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response['value']['…
CVE-2026-41009Medium5.82026-05-27When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) rea…