A vulnerability in Cloudfoundry's Route Services allows malicious developers to send application traffic to network destinations outside the app's configured egress rules. This can enable access to internal HTTP services reachable by the Gorouter that were not previously accessible from outside networks or the application itself. The issue affects routing releases from v0.118.0 through v0.371.0 and CF Deployment versions from v0.0.2 through v54.14.0. Upgrading to routing release v0.372.0 or CF Deployment v55.0.0 or later mitigates the vulnerability.