What is CVE-2026-47829?

CVE-2026-47829 is a high-severity vulnerability in Cloudfoundry Foundation Bosh-cli, classified under CWE-88 IMPROPER NEUTRALIZATION OF ARGUMENT DELIMITERS IN A COMMAND ('ARGUMENT INJECTION'). CVSS score: 8.3/10. Published 2026-07-09.

How severe is CVE-2026-47829?

High severity. CVSS v3 base score is 8.3 out of 10.

Vulnerability in Cloudfoundry Foundation Bosh-cli

CVE-2026-47829

Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to loca…

CVSS v3 metric

CVSS v3 base score 8.3 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Cloudfoundry Foundation Bosh-cli — versions 0

References

security@vmware.com

Frequently asked questions

What is CVE-2026-47829?: CVE-2026-47829 is a high-severity vulnerability in Cloudfoundry Foundation Bosh-cli, classified under CWE-88 IMPROPER NEUTRALIZATION OF ARGUMENT DELIMITERS IN A COMMAND ('ARGUMENT INJECTION'). CVSS score: 8.3/10. Published 2026-07-09.
How severe is CVE-2026-47829?: High severity. CVSS v3 base score is 8.3 out of 10.