Skip to content
OpenAdvisories

Product · CloudFoundry Foundation

bosh-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-47829

    Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director

    Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution …

    CloudFoundry Foundation bosh-cli