CVE-2026-41010 | Cloud Foundry BOSH Director up to 282.1.11 Exec.sh File.join os command injection

A vulnerability, which was classified as critical, has been found in Cloud Foundry BOSH Director up to 282.1.11. The impacted element is the function File.join of the file Exec.sh. The manipulation leads to os command injection.

This vulnerability is listed as CVE-2026-41010. The attack must be carried out locally. There is no available exploit.

It is advisable to upgrade the affected component.