CVE-2026-47829

CVSS Score & Metrics

Base Score

8.3 / 10

Vector String

                                        CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H                                    

Vulnerability Description

Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator's workstation.
Affected versions: bosh-cli versions prior to v7.10.4.

Vulnerability Details

Published Date

July 09, 2026

Last Modified

July 09, 2026

Source

NVD

Vendor

CloudFoundry Foundation

Product

bosh-cli

External References

https://www.cloudfoundry.org/blog/cve-2026-47829-argument-injection-in-bosh-cli-allows-local-command-execution-on-operator-workstations-via-compromised-director/

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment