By vendor

Cloudfoundry vulnerabilities

Known CVEs affecting Cloudfoundry products, prioritized by severity, with SEC.co remediation and detection guidance.

3 published vulnerabilities

• CVE-2026-47828HIGH 8.8

  The BOSH CLI, used to deploy and manage BOSH Directors on infrastructure, fails to validate TLS certificates when uploading sensitive data during environment creation and deletion. An attacker on the network can intercept these connections, steal the basic authentication credentials, and harvest bootstrap secrets that provide immediate administrative access to the BOSH Director. This is a critical supply-chain risk because the compromised credentials enable root-level code execution on newly provisioned systems.

• CVE-2026-41857HIGH 7.8

  A malicious or compromised BOSH Director can trick operators into executing arbitrary shell commands on their local workstations. When an operator runs standard BOSH CLI commands like bosh ssh, bosh scp, or bosh logs -f, a hostile Director can inject and run commands with the operator's privileges. This affects BOSH CLI versions before 7.10.5 and requires user interaction—the operator must run the vulnerable command—but succeeds with default settings.

• CVE-2026-47829HIGH 7.8

  A flaw in bosh-cli versions before 7.10.4 allows an attacker who controls a BOSH Director to execute arbitrary commands on an operator's workstation. When an operator uses bosh-cli to interact with a compromised Director—via commands like `bosh ssh -c` or `bosh logs -f`—the attacker can inject malicious OpenSSH options that get passed to the local SSH process, resulting in command execution on the operator's machine. This is a local attack that requires the operator to actively run bosh-cli commands against a compromised Director, but it directly compromises the operator's workstation security.