CVE-2026-41009

When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value']['result']['compile_log_id'] and format_exception (line 318-325) reads exception['blobstore_id']; both pass the agent-supplied string unmodified to download_and_delete_blob(blob_id) (line 344-349), which calls @resource_manager.get_resource(blob_id) and, in an ensure block, @resource_manager.delete_resource(blob_id). Api::ResourceManager forwards the id straight to blobstore.get(id) / blobstore.delete(id). When the director is configured with the local blobstore provider, Blobstore::LocalClient#object_file_path(oid) is File.join(@blobstore_path, oid) (local_client.rb:54-56) with no normalisation, so oid = "../../jobs/director/config/director.yml" resolves outside the blobstore root. Affected versions: BOSH Director: All versions prior to v282.1.12

• CWE-22

• https://www.cloudfoundry.org/blog/cve-2026-41009-local-blobstore-may-allow-arbitrary-reads-deletes/Mitigation, Vendor Advisory

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41003An attacker able to influence values in RelyingPartyRegistra…5.4
• CVE-2026-41004When enabling trace logging in Spring Cloud Config Server se…4.4
• CVE-2026-41005Cloud Foundry UAA incorrectly treated XML encryption to the …9
• CVE-2026-41006Spring HATEOAS's internal PropertyUtils.createObjectFromProp…7.5
• CVE-2026-41007Spring HATEOAS maintains an unbounded static cache of String…7.5
• CVE-2026-41008Spring Security Authorization Server's authorization endpoin…6.1
• CVE-2026-4101IBM Verify Identity Access Container 11.0 through 11.0.2 and…9.8
• CVE-2026-41010ReleaseJob#unpack builds job_dir = File.join(@release_dir, '…8.7
• CVE-2026-41011PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" w…8.7
• CVE-2026-41013Input validation bypass in SMB volume mount handling in Clou…8.1
• CVE-2026-41014The partitioned_dag_runs endpoints in the Airflow UI enforce…4.3
• CVE-2026-41015radare2 before 9236f44, when configured on UNIX without SSL,…7.4