A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 30 Oct 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks. | |
| Title | Credential exposure to space supporter | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: vmware
Published:
Updated: 2026-10-30T08:35:20.435Z
Reserved: 2026-07-04T18:15:19.504Z
Link: CVE-2026-59386
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-30T09:17:14.790
Modified: 2026-10-30T09:17:14.790
Link: CVE-2026-59386
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.