Skip to content

Product

Cloud Foundry bosh vulnerabilities

5 published CVES affecting Cloud Foundry bosh, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
0
High
3
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest Cloud Foundry bosh CVEs

Newest publication first

  1. CVE-2026-41704 Compromised VM can make arbitrary blobstore deletes

    Published
    MediumCVSS 6.8 EPSS 0.08%

    AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response['value']['result']['compile_log_id'] (line 332-338) and passes it to download_and_delete_blob. Separately, any response containing...

  2. CVE-2026-41009 Local Blobstore may allow arbitrary reads/deletes

    Published
    MediumCVSS 4.3 EPSS 0.10%

    When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value']['result']['compile_log_id'] and format_exception (line 318-325) reads exception['blobstore_id']; bot...

  3. CVE-2019-11271 Bosh Deployment logs leak sensitive information

    Published
    HighCVSS 7.8 EPSS 0.29%

    Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.

  4. CVE-2018-11083 Bosh accepts refresh tokens in place of an access token

    Published
    HighCVSS 8.1 EPSS 1.5%

    Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allows refresh tokens to be as access tokens when using UAA for authentication. A remote attacker with an admin refresh token given by UAA can be...

  5. CVE-2017-4961 An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum....

    Published
    HighCVSS 8.8 EPSS 0.48%

    An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.