CloudFoundry BOSH BOSH CLI vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting CloudFoundry BOSH BOSH CLI: 1 record(s), with affected versions and fixes.

CVE-2026-41857 High · 7.8 CWE-78 Jul 9, 2026

BOSH CLI Shell Injection

A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.