CVE-2026-40964 - Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token

Back Back to CVE browser

HIGH

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token

Published Jun 1, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.65%

Description

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token.

Affected versions: - log-cache_release: all versions through v3.2.6 (inclusive); fixed in v3.2.7 or later - CF Deployment: all versions through v55.?.0 (inclusive); fixed in v55.?.0 or later (bundles log-cache_release v3.2.7)

Affected products

Vendor Cloud Foundry Foundation Product CF Deployment Default
unaffected
Affected
- ≥ 12.44.0, ≤ 55.2.0
Vendor Cloud Foundry Foundation Product Log-Cache Release Default
unaffected
Affected
- ≥ 2.7.0, ≤ 3.2.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Cloud Foundry Foundation	CF Deployment	unaffected	Affected ≥ 12.44.0, ≤ 55.2.0
Cloud Foundry Foundation	Log-Cache Release	unaffected	Affected ≥ 2.7.0, ≤ 3.2.6