CVE-2026-47829

Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director

High · published July 9, 2026

CVSS v4.0
7.7
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator's workstation.

Affected versions: bosh-cli versions prior to v7.10.4.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00419 · 35.2th percentile
Published
2026-07-09T06:25Z
EPSS history
Timeline
  • 09 JUL 06:25Z
    Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director
    cvelistv5