[CVE-2026-47826] The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbi…

Descripción técnica

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4.

Puntuación CVSS

Score: 9.1/10 — Severidad: CRITICAL — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Productos afectados

Bosh cli — Cloudfoundry

Debilidades (CWE)

CWE-22

Fuente oficial

Publicado en NIST NVD.