CVE-2026-47826 — blobs.yaml Path Traversal Allows File Writes

CVE-2026-47826

blobs.yaml Path Traversal Allows File Writes PUBLISHED

Description (CNA)

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4.

Affected (CNA)

Vendor / product	Versions
CloudFoundry Foundation / BOSH CLI tool	affected 0 before 7.10.4

CWE

No CWE identifiers supplied.

References

https://www.cloudfoundry.org/blog/cve-2026-47826-blobs-yaml-path-traversal-allows-file-writes/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.