Skip to content
OpenAdvisories

Product · Cloud Foundry

BOSH Director

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-41704

    Compromised VM can make arbitrary blobstore deletes

    AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response['value']['result']['compile_log_id'] (line 332-338) and passes it to download_and_delete_blob. Separately, any…

    Cloud Foundry BOSH Director
  • Medium 5.8
    CVE-2026-41009

    Local Blobstore may allow arbitrary reads/deletes

    When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value']['result']['compile_log_id'] and format_exception (line 318-325) reads exception…

    Cloud Foundry BOSH Director