The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 (inclusive)
{ "binaries": [ { "binary_name": "bosh", "binary_version": "0.6-6build1" } ] }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47832.json"
{ "binaries": [ { "binary_name": "bosh", "binary_version": "0.6-7" } ] }
{ "binaries": [ { "binary_name": "bosh", "binary_version": "0.6-10" } ] }
{ "binaries": [ { "binary_name": "bosh", "binary_version": "0.6-11" } ] }
{ "binaries": [ { "binary_name": "bosh", "binary_version": "0.6-12" } ] }
{ "binaries": [ { "binary_name": "bosh", "binary_version": "0.6-13build1" } ] }