The blobs.yml path key in the BOSH CLI tool can be crafted so that the CLI writes files outside its intended directory, allowing arbitrary file creation and the potential exfiltration of sensitive data. This flaw is a path traversal weakness (CWE-22) that also exposes information (CWE-200).

CloudFoundry Foundation BOSH Command Line Interface versions earlier than v7.10.4 are vulnerable; any installation that processes user‑supplied blobs.yml files without the patch is at risk.

The CVSS score of 8.5 indicates high severity, while the EPSS score of less than 1% shows current exploitation probability is low and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that an attacker would need to provide or modify a blobs.yml file that the CLI processes, for example via a malicious buildpack or compromised script, to achieve arbitrary file writes and potential data exposure.