CVE-2026-41009 | Cloud Foundry BOSH Director up to 282.1.11 compile_package response[‘value’] path traversal

May 27, 2026 Yanac

A vulnerability was found in Cloud Foundry BOSH Director up to 282.1.11. It has been classified as critical. The affected element is the function compile_package. This manipulation of the argument response[‘value’] causes path traversal.

This vulnerability is registered as CVE-2026-41009. The attack needs to be launched locally. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More