Veille CVE

Recherche « CloudFoundry Foundation BOSH »

3 CVE

Critique 1 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « CloudFoundry Foundation BOSH » ✕
  1. CVE-2026-41861 4.2 Moyenne

    CloudFoundry Foundation BOSH

    Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with partially attacker-controlled body to any path ending in .network, and create any missing parent directories with mode 0777 via network Alias on Ubuntu. Affected versions: BOSH agent < v2.847.0 (jammy <= v1.1202, or noble <= v1.364). Lower bound unspecified in advisory ("All bosh agent versions").

  2. CVE-2026-47829 7.8 Élevée

    CloudFoundry Foundation bosh-cli · Cloudfoundry bosh cli

    Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator's workstation. Affected versions: bosh-cli versions prior to v7.10.4.

  3. CVE-2026-47826 9.1 Critique

    CloudFoundry Foundation BOSH CLI tool · Cloudfoundry bosh cli

    The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4.