CVE-2026-59386
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Oct 30, 2026
Vendor
unknown
Description
A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.