CloudFoundry BOSH vulnerabilities
We track 1 vulnerability in CloudFoundry BOSH products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest CloudFoundry BOSH vulnerabilities
- 7.1 High severity
BOSH CLI: Improper Neutralization of Special Elements used in an OS Command
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.