CVE-2026-47829 – Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director

CVE ID :CVE-2026-47829

Published : July 9, 2026, 7:16 a.m. | 32 minutes ago

Description :Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator’s workstation.
Affected versions: bosh-cli versions prior to v7.10.4.

Severity: 8.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…