Route Services Vulnerability in Cloud Foundry by Pivotal

CVE-2026-22726

What is CVE-2026-22726?

The vulnerability allows route services in Cloud Foundry to improperly send application traffic to network destinations outside of the established egress settings. This may enable a malicious developer with access to the system to configure a harmful route-service that redirects requests to internal HTTP services that were not designed to be exposed to outside networks. Systems running affected versions of routing and deployment releases must be updated to mitigate the improper routing behavior and improve overall network security.

References