CVE-2024-38826: Cloud Foundry

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: * Upgrade capi release version to 1.194.0 or greater * Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release

Affected products

• Cloud Foundry Cloud Foundry: before 1.194 (fixed in 1.194)
• Cloudfoundry Cloud Foundry: before 1.194 (fixed in 1.194)

Published 2024-11-11. Last modified 2026-06-17.