CVE-2026-47826

blobs.yaml Path Traversal Allows File Writes

High · published July 9, 2026

CVSS v4.0
8.5
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information.

Affected versions: BOSH CLI tool versions prior to v7.10.4.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00545 · 45.0th percentile
Published
2026-07-09T05:45Z
EPSS history
Timeline
  • 09 JUL 05:45Z
    blobs.yaml Path Traversal Allows File Writes
    cvelistv5