Is CVE-2026-59385 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-59385?

CVE-2026-59385 has a CVSS v3 severity of LOW (2.7).

Back

CVE-2026-59385

Description

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct reading of broker credentials, making this an indirect extraction method.