File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a m…CVE-2018-1265Cloud Foundry · 1.7% likely

   CWE-434

2. Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user can predict the locat…CVE-2018-1266Cloudfoundry · 1.1% likely

   CWE-22

3. blobs.yaml Path Traversal Allows File WritesCVE-2026-47826CloudFoundry Foundation · CVSS 8.5 · 0.5% likely

   CWE-22

4. Arbitrary Root File Write via Path Traversal in BOSH agentCVE-2026-41861CloudFoundry Foundation · CVSS 4.2 · 0.2% likely

   CWE-22

5. setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to ch…CVE-2026-47833Cloud Foundry Foundation · CVSS 6.1 · 0.2% likely

   CWE-59

6. Local Blobstore may allow arbitrary reads/deletesCVE-2026-41009Cloud Foundry Foundation · CVSS 5.8 · 0.1% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.