EUVD-2026-42505
GHSA-xf9x-r7gm-j3j6
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Payload is delivered over the network from the Director (AV:N) but needs a preexisting Director compromise plus operator action, so AC:H and UI:R; full workstation compromise gives C/I/A:H.
Primary rating from Vendor (vmware).
CVSS VectorVendor: vmware
Lifecycle Timeline
2DescriptionCVE.org
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.
AnalysisAI
Arbitrary command execution on operator workstations in Cloud Foundry BOSH CLI before 7.10.5 allows a compromised or malicious BOSH Director to inject and run shell commands locally when an operator invokes bosh ssh, bosh scp, or bosh logs -f with default flags. Because the CLI trusts director-supplied data and passes it into a shell, a controlled director turns a routine operator action into local code execution on the trusted management host. No public exploit identified at time of analysis; not listed in CISA KEV, though the reference blog by Cloud Foundry (originally reported by VMware) confirms the flaw and a fixed release.
Technical ContextAI
BOSH is the deployment and lifecycle-management toolchain underpinning Cloud Foundry and related platforms; operators use the bosh CLI on their workstation to talk to a central BOSH Director that orchestrates VMs and services. The vulnerable data path is the director-to-CLI trust boundary: when the operator runs interactive commands like bosh ssh/scp/logs -f, the CLI takes connection or target details returned by the Director and constructs local shell invocations. Insufficient neutralization of that director-controlled input allows OS command injection - functionally CWE-78 (OS Command Injection), even though the record lists CWE as N/A. The affected CPE is cpe:2.3:a:cloudfoundry_bosh:bosh_cli, i.e., the CLI component only, not the Director or agent. The tags 'Information Disclosure' and 'Bosh Cli' understate the impact, which is full command execution rather than mere disclosure.
RemediationAI
Upgrade the BOSH CLI on every operator workstation and CI/automation host to version 7.10.5 or later (Vendor-released patch: 7.10.5), per the Cloud Foundry advisory at https://www.cloudfoundry.org/blog/cve-2026-41857-bosh-cli-shell-injection/. Until all clients are upgraded, reduce exposure by only pointing the CLI at Directors you fully trust and control, and by treating any Director whose integrity is in doubt as hostile - avoid running bosh ssh, bosh scp, or bosh logs -f against it, since those are the specific commands that trigger the injection with default flags. Additional compensating controls: run the CLI from a disposable, least-privilege jump host rather than a workstation holding platform-wide credentials (trade-off: added operational friction), tighten and monitor access to the Director to detect compromise early, and restrict who can register or man-in-the-middle the Director endpoint the CLI connects to.
Man-in-the-middle credential theft and root code execution affects the BOSH CLI (bosh-cli) prior to v7.10.4, which fails
Cloud Foundry BOSH CLI, versions prior to v3.0.1, contains an improper access control vulnerability. Rated high severity
Command injection in Cloud Foundry's BOSH CLI on Windows enables an adjacent-network attacker to execute arbitrary shell
Argument injection in bosh-cli versions before v7.10.4 lets a compromised or malicious BOSH Director inject arbitrary Op
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today