Credential Handling Weakness in BOSH Deployment by Cloud Foundry
CVE-2026-47832

7.3HIGH

Key Information:

Vendor: Cloudfoundry Foundation
Status: Bosh-openstack-cpi-release
Vendor: CVE Published:; 12 November 2026

🔔 Create Cloudfoundry Foundation Vulnerability Alert

What is CVE-2026-47832?

A significant vulnerability exists in the BOSH deployment concerning the handling of application credentials, which are being logged in cleartext within BOSH debug logs. This flaw poses a risk as sensitive information could be exposed, potentially allowing unauthorized access to application data and services. Users of the affected bosh-openstack-cpi-release versions need to be aware of this issue and take appropriate measures to secure their deployments.

Affected Version(s)

bosh-openstack-cpi-release v55

References

https://www.cloudfoundry.org/blog/cve-2026-47832-openstac...

CVSS V4

Score:

7.3

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 12, 2026
Vulnerability Reserved
May 20, 2026

CVE-2026-47832 Data

JSON