Command Injection Vulnerability in BOSH CLI Tool for Cloud Foundry
CVE-2026-47827

7.5HIGH

Key Information:

Status
Vendor
CVE Published:
21 August 2026

What is CVE-2026-47827?

A command injection vulnerability exists in the BOSH CLI tool on Windows platforms within Cloud Foundry, enabling remote attackers to execute arbitrary shell commands. This flaw may lead to unauthorized access and manipulation of system resources, posing significant security concerns for users of the BOSH CLI tool. Effective mitigation strategies should be employed to safeguard environments against potential exploitation.

Affected Version(s)

BOSH CLI Windows 0.0

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.