CVE-2018-1197: Pivotal Software Windows Stemcells

High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.

Affected products

• Pivotal Software Windows Stemcells: before 1200.14 (fixed in 1200.14)

Published 2018-03-19. Last modified 2026-06-17.