Privilege Escalation Vulnerability in SpaceSupporter for CloudFoundry

CVE-2026-59386

What is CVE-2026-59386?

A vulnerability in CloudFoundry's SpaceSupporter allows for the improper modification of an application's startup command and buildpack by individuals with SpaceDeveloper privileges. This exploitation can lead to unauthorized access, enabling attackers to retrieve sensitive service credentials via malicious alterations to startup commands or through the use of custom buildpacks. It poses a significant security risk that might compromise application integrity and user data.

References