Vulnerabilidades do Cloud Foundry Foundation Smb-volume-release
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Cloud Foundry Foundation Smb-volume-release: 1 registro(s), com versões afetadas e correções.
CVE-2026-41013
Alta · 8.1
CWE-88 01/06/2026
Tenant-controlled comma smuggles arbitrary CIFS mount options
Input validation bypass in SMB volume mount handling in CloudFoundry Foundation diego-release allows low-privileged CF space developer to inject arbitrary kernel CIFS mount options via bypassing the mount-option allowlist, enabling privilege escalation and security control bypass on multi-tenant Diego cells.
Affected versions:
smb-volume-release: All versions prior to v3.60.0
CF Deployment: All versions prior to v56.0.0