← Database

CVE-2026-47826

CRITICAL CVSS: 9.1 Published: 2026-07-09 Modified: 2026-07-13

Description

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4.

Affected Platforms

Cloudfoundry Bosh Cli

Weakness Type

CWE-22

References