CVE-2026-41723 is a set of stored cross-site scripting vulnerabilities in VMware Cloud Foundation Operations. These vulnerabilities allow a malicious user with limited privileges (specifically, the ability to create policies, views, or text widgets) to inject and execute arbitrary scripts. This could lead to unauthorized administrative actions within the affected VMware product. The vulnerability is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation). The CVSS v3.1 base score is 8.0, reflecting network attack vector, low attack complexity, required privileges, user interaction, and high impact on confidentiality, integrity, and availability. The affected versions include 5.x, 9.0.x.x, and 9.1.x.x of VMware Cloud Foundation Operations. As of the published date, no official patch or remediation level has been disclosed.

Successful exploitation allows an attacker with privileges to create certain content types to execute arbitrary scripts in the context of the VMware Cloud Foundation Operations administrative interface. This can lead to full compromise of administrative functions, including unauthorized changes and potential system control. The impact affects confidentiality, integrity, and availability of the system at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict privileges to create policies, views, or text widgets to trusted administrators only. Monitor for suspicious activity related to content creation within the system. Follow VMware advisories closely for updates on patches or official mitigations.