CVE-2026-47830

HIGH

Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

CVSS v3

8.8

HIGH

EPSS Score

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service restart or reboot. This can lead to full host control. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.

Technical Details

CVSS v3 Vector
3.0
Published
7/9/2026
Last Modified
7/9/2026

Frequently Asked Questions

What is CVE-2026-47830?

Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service restart or reboot. This can lead to full host control. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.

Is CVE-2026-47830 actively exploited?

Active exploitation of CVE-2026-47830 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-47830?

CVE-2026-47830 has a CVSS v3 base score of 8.8 (HIGH severity), with vector string 3.0.

Is CVE-2026-47830 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.