This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-41857 | BDVDB-2026-346545 Detail

CloudFoundry BOSHBOSH CLI

Description#

A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.

Impact#

Arbitrary shell command execution on the operator's workstation.

Weaknesses#

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.