BOSH CLI vulnerabilities

1 known vulnerability in BOSH CLI from CloudFoundry BOSH. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  BOSH CLI: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-41857Jul 9, 2026CloudFoundry BOSH

  A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.