CloudFoundry Foundation BOSH CLI tool vulnerabilities (CVE)

CVE records published for CloudFoundry Foundation BOSH CLI tool, newest first. Follow to get an email when a new one appears.

1 results
8.8High
CVE-2026-47826

blobs.yaml Path Traversal Allows File Writes

CloudFoundry Foundation BOSH CLI tool

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4.