Authentication bypass in the cf-auth-proxy component allows an unauthenticated remote attacker to forge a JSON Web Token recognized as a valid logs.admin token; the attacker can then read every log and metric for all applications and platform components. The weakness is a classic authentication bypass (CWE‑287). The impact is a loss of confidentiality for all log data, potentially revealing sensitive information and allowing attackers to understand system internals and troubleshooting data.

The vulnerability affects installations of Cloud Foundry Foundation:CF Deployment and Cloud Foundry Foundation:log-cache_release. All log-cache_release versions up to and including v3.2.6 are impacted, and all CF Deployment releases up to and including v55.x.0 are affected. Versions v3.2.7 or later for log-cache_release, and a CF Deployment release that bundles log-cache_release v3.2.7 or newer, contain the fix.

The CVSS score of 7.5 indicates a high severity, and the lack of an EPSS score suggests no current metric but the threat remains significant. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit this flaw remotely by creating a forged JWT, which the cf-auth-proxy accepts as authentic, and then using it to retrieve any log or metric data without authentication.