BOSH Director CVE-2026-41704

Exploitation requires that the attacker has already achieved high-privileged access (PR:H per CVSS 4.0 vector) on a BOSH-managed VM sufficient to publish crafted NATS reply messages that the Director's AgentClient will process. The attack vector is local (AV:L), meaning the attacker must be operating from within the BOSH-managed infrastructure with access to the NATS message bus - this is not an internet-facing attack surface. Attack complexity is rated High (AC:H), indicating that conditions beyond mere VM access are required, such as precise timing of the crafted reply within an active NATS exchange or overcoming other environmental constraints specific to the Director's message processing loop. This vulnerability does not enable initial access and provides no confidentiality benefit; it is exclusively a post-compromise destructive capability. Limiting factors include: the mandatory prior high-privilege VM compromise, High attack complexity reducing reliable exploitation, and the absence of any network-reachable entry point. Environments with strict NATS access controls or VM isolation significantly reduce the realistic attack surface.

All available signals converge on a moderate, post-compromise risk profile rather than a critical mass-exploitation threat. The CVSS 4.0 score of 6.8 reflects the constrained attack geometry: AV:L (local, requiring presence within BOSH-managed infrastructure), AC:H (high attack complexity, implying non-trivial timing or environmental conditions), and PR:H (high privileges required, meaning the attacker must already control a BOSH-managed VM with elevated access). EPSS at 0.01% (1st percentile) is consistent with the SSVC determination of Exploitation: none and Automatable: no - this is not a target for opportunistic or automated mass exploitation. The impact profile is asymmetric: no confidentiality loss (VC:N, SC:N), high integrity impact to the vulnerable system (VI:H - arbitrary blob deletion), and high availability impact to subsequent systems (SA:H - dependent deployments break when blobs are missing). The 'Authentication Bypass' tag reflects the absent blobstore access control, but this label can be misleading in isolation: exploitation is still gated behind a prior full VM compromise at high privilege. This vulnerability functions as a post-compromise lateral damage enabler within an already partially-compromised BOSH environment, not an initial access vector. No conflicting signals were identified; CVSS, EPSS, and SSVC are internally consistent.

An attacker who has gained root or equivalent high-privileged access on a BOSH-managed VM crafts a malicious NATS reply message containing a targeted blob ID in the compile_log_id or blobstore_id field, chosen to match a critical deployment artifact such as a compiled package or release binary. The BOSH Director's AgentClient accepts the reply and passes the ID directly to ResourceManager, which calls blobstore.delete() without any ownership or format check, permanently removing the artifact from the shared blobstore. Downstream deployments or pipelines referencing the deleted blob then fail, producing availability impact across the BOSH environment. No public POC exists at time of analysis.