Skip to content
OpenAdvisories

Product · Cloud Foundry

SMB-volume release

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-41013

    Tenant-controlled comma smuggles arbitrary CIFS mount options

    Input validation bypass in SMB volume mount handling in CloudFoundry Foundation diego-release allows low-privileged CF space developer to inject arbitrary kernel CIFS mount options via bypassing the mount-option allowlist, enabling privilege escalation and se…

    Cloud Foundry CF Deployment SMB-volume release