CVE-2026-41857
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI prior to 7.10.5.
Risk Assessment
An attacker can take control of the administrator's workstation, leading to data theft, malware installation, or further attacks on the infrastructure.
Recommendation
Immediately upgrade BOSH CLI to version 7.10.5 or later. Until upgraded, avoid using bosh ssh, bosh scp, and bosh logs -f with default flags.
Other vulnerabilities in BOSH CLI
See all- CVE-2026-47826Critical
A path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information via the blobs.yml file. Affected versions are prior to v7.10.4.
- CVE-2026-47827High
Command Injection in BOSH CLI tool on Windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities.
- CVE-2026-47829High
An argument injection vulnerability in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned SSH process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator's workstation.
- CVE-2026-47828High
A vulnerability in BOSH CLI (versions prior to 7.10.4) causes the client to skip server certificate verification for DAV blobstore during create-env and delete-env operations, allowing a network attacker to intercept Basic-auth credentials and read the rendered-templates archive containing all bootstrap secrets for the new BOSH Director.
Original NVD description (English source)
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.