CVE Intelligence

CloudFoundry BOSH vulnerabilities

🔔 Create alert RSS

Published CVEs affecting CloudFoundry BOSH products: 1 record(s), with severity, exploitation and fixes.

BOSH CLI 1

Exploited only (KEV) →

CVE-2026-41857 High · 7.8 CWE-78 Jul 9, 2026
BOSH CLI Shell Injection
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.