CVE-2026-40965
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Cloud Foundry UAA versions v76.12.0 through v78.12.0 inadvertently expose EC private keys through the public /token_keys endpoint. The vulnerability affects only deployments using EC keys for JWT token signing.
Risk Assessment
Risk of EC private key exposure, which could lead to JWT token forgery and unauthorized access to systems.
Recommendation
Update UAA to version v78.13.0 or later and CF Deployment to v56.1.0 or later.
Original NVD description (English source)
Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are inadvertently exposed through the public /token_keys endpoint. This endpoint is designed to provide public key material for JWT token verification but incorrectly exposes private key components for EC keys. The vulnerability affects deployments using EC keys for JWT token signing. The vulnerability does not affect RSA key configurations, only deployments using EC keys for JWT signing. Affected versions: - uaa_release: v76.12.0 through v78.12.0 (inclusive); fixed in v78.13.0 or later - CF Deployment: v30.0.0 through v56.0.0 (inclusive); fixed in v56.1.0 or later (bundles uaa_release v78.13.0)