Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-47826

blobs.yaml Path Traversal Allows File Writes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CloudFoundry Foundation BOSH CLI tool

Default version status: unaffected

  • 0 to < 7.10.4affected

References