CVE-2026-41724 is a set of stored cross-site scripting vulnerabilities in VMware Cloud Foundation Operations 5.x. An attacker with certain privileges can inject malicious scripts via policies, views, or text-widgets, potentially enabling unauthorized administrative actions. The vulnerability is remotely exploitable over the network with low attack complexity but requires privileges to create certain objects. The CVSS 3.1 base score is 8.0, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker with limited privileges to escalate their control by executing arbitrary scripts in the context of VMware Cloud Foundation Operations, potentially leading to full administrative control. This impacts confidentiality, integrity, and availability of the affected system. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict privileges to create policies, views, or text-widgets to trusted administrators only. Monitor for unusual administrative activity related to these features.