CVE-2026-22723 UAA User Token Revocation logic error
Attackers can bypass token revocation mechanisms due to a logic error, maintaining unauthorized access to Cloud Foundry UAA services.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-22723?
CVE-2026-22723 is a medium-severity vulnerability in Cloudfoundry Foundation UAA, published on 5 Mar 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
Which versions are affected by CVE-2026-22723?
2 open source packages ship an affected version, including org.cloudfoundry.identity:cloudfoundry-identity-server. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
org.cloudfoundry.identity:cloudfoundry-identity-server Maven | From 77.30.0 | 78.8.0 |
org.cloudfoundry.identity:cloudfoundry-identity-server Maven | From 77.30.0 | 78.8.0 |
Products include Cloudfoundry Cf-Deployment, Cloudfoundry Uaa-Release.
How do I fix CVE-2026-22723?
Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 78.8.0 or later.
Is CVE-2026-22723 being exploited?
There is no known exploitation of CVE-2026-22723 in the wild and no public exploit code.
Other vulnerabilities in Cloudfoundry Foundation UAA
- CVE-2022-31733 Auth bypass in Cloud Foundry Diego and CF Deployment
- CVE-2020-5402 UAA fails to check the state parameter when authenticating with external IDPs
- CVE-2019-11293 UAA logs all query parameters with debug logging level
- CVE-2019-11290 Cloud Foundry UAA logs query parameters in tomcat access file
- CVE-2019-11283 Password leak in smbdriver logs
Sources
Also known as GHSA-6wcw-r64p-qrrw.