capi_cloud_foundry_controller vulnerabilities
CVEs whose affected-version data names the capi_cloud_foundry_controller package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-59388Medium· 6.5Cloud Controller exposes secrets in audit log
Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exposed in audit events for app manifest application, creation, and updates; syslog drain URL credentials are exposed in…
▾ SunlitCloud Foundry Foundation · CAPI (Cloud Foundry Controller)EPSS 0.30%via CVEORG
CVE-2026-59385Low· 2.7Space Developer can extract space-scoped broker credentials
A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does…
▾ SunlitCloud Foundry · CAPI (Cloud Foundry Controller)EPSS 0.18%via CVEORG