CVE-2026-47832

CVSS 7.3 (high) · published 2026-11-12

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 (inclusive)

Weakness: CWE-532

Source: NVD CVE-2026-47832

References

• https://www.cloudfoundry.org/blog/cve-2026-47832-openstack-application-credentials-logged-in-cleartext-to-bosh-debug-logs/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.