CVE-2026-59386

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-59386", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2026-07-04T18:15:19.504Z", "datePublished": "2026-10-30T08:35:20.435Z", "dateUpdated": "2026-10-30T16:56:57.050Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-10-30T08:35:20.435Z"}, "title": "Credential exposure to space supporter", "affected": [{"vendor": "Cloud Foundry", "product": "Cloud Foundry Controller (CAPI)", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.247.0", "versionType": "OSS"}]}, {"vendor": "Cloud Foundry", "product": "cf-deployment", "versions": [{"status": "affected", "version": "0", "lessThan": "v60.9.0", "versionType": "oss"}]}], "descriptions": [{"lang": "en", "value": "A SpaceSupporter could improperly modify an application's start command and buildpack\u2014actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A SpaceSupporter could improperly modify an application's start command and buildpack\u2014actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.</p>"}]}], "references": [{"url": "https://www.cloudfoundry.org/blog/cve-2026-59386-credential-exposure-to-space-supporter/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"}}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-269", "lang": "en", "description": "CWE-269 Improper Privilege Management"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T16:56:35.592889Z", "id": "CVE-2026-59386", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T16:56:57.050Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-59386", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-30T16:56:35.592889Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T16:56:49.356Z"}}], "cna": {"title": "Credential exposure to space supporter", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Cloud Foundry", "product": "Cloud Foundry Controller (CAPI)", "versions": [{"status": "affected", "version": "0", "versionType": "OSS", "lessThanOrEqual": "1.247.0"}]}, {"vendor": "Cloud Foundry", "product": "cf-deployment", "versions": [{"status": "affected", "version": "0", "lessThan": "v60.9.0", "versionType": "oss"}]}], "references": [{"url": "https://www.cloudfoundry.org/blog/cve-2026-59386-credential-exposure-to-space-supporter/"}], "descriptions": [{"lang": "en", "value": "A SpaceSupporter could improperly modify an application's start command and buildpack\u2014actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.", "supportingMedia": [{"type": "text/html", "value": "<p>A SpaceSupporter could improperly modify an application's start command and buildpack\u2014actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.</p>", "base64": false}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-10-30T08:35:20.435Z"}}}, "cveMetadata": {"cveId": "CVE-2026-59386", "state": "PUBLISHED", "dateUpdated": "2026-10-30T16:56:57.050Z", "dateReserved": "2026-07-04T18:15:19.504Z", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "datePublished": "2026-10-30T08:35:20.435Z", "assignerShortName": "vmware"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Cloud Foundry Controller (CAPI)", "vendor": "Cloud Foundry", "versions": [{"lessThanOrEqual": "1.247.0", "status": "affected", "version": "0", "versionType": "OSS"}]}, {"product": "cf-deployment", "vendor": "Cloud Foundry", "versions": [{"lessThan": "v60.9.0", "status": "affected", "version": "0", "versionType": "oss"}]}], "source": "security@vmware.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A SpaceSupporter could improperly modify an application's start command and buildpack\u2014actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks."}], "id": "CVE-2026-59386", "lastModified": "2026-10-30T17:44:35.820", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.2, "source": "security@vmware.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59386", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T16:56:35.592889Z", "version": "2.0.3"}}]}, "published": "2026-10-30T09:17:14.790", "references": [{"source": "security@vmware.com", "url": "https://www.cloudfoundry.org/blog/cve-2026-59386-credential-exposure-to-space-supporter/"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "capi: capi: Privilege escalation via unauthorized application configuration modification", "id": "2563891", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563891"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-267", "details": ["A flaw was found in Cloud Foundry Controller (CAPI). An authenticated user with SpaceSupporter permissions can improperly modify an application's start command or buildpack configuration, operations that should require elevated privileges. This privilege escalation can allow the unauthorized retrieval of sensitive service credentials."], "name": "CVE-2026-59386", "package_state": [{"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift4/driver-toolkit-rhel8", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-30T08:35:20Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-59386\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-59386\nhttps://www.cloudfoundry.org/blog/cve-2026-59386-credential-exposure-to-space-supporter/"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v60.9.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "cf-deployment", "source": "cna", "vendor": "Cloud Foundry"}, "product": "cf-deployment", "vendor": "cloudfoundry"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.247.0]"}}], "enrichment": {"confidence": 81.0, "confidence_source": "matching", "scores": [{"score": 81.0, "source": "matching"}]}, "original": {"product": "Cloud Foundry Controller (CAPI)", "source": "cna", "vendor": "Cloud Foundry"}, "product": "cloud_controller", "vendor": "cloudfoundry"}], "created": "2026-10-30T10:00:16.003169+00:00", "updated": "2026-10-31T01:45:15.201107+00:00", "vendors": ["cloudfoundry", "cloudfoundry$PRODUCT$cf-deployment", "cloudfoundry$PRODUCT$cloud_controller"]}