This vulnerability in bosh-cli allows an attacker controlling a BOSH Director to perform argument injection by inserting arbitrary OpenSSH options into the ssh command executed locally by the operator. The flaw affects non-interactive SSH command paths such as 'bosh ssh -c' and 'bosh logs -f'. Exploitation can result in local command execution on the operator's machine. The issue is present in bosh-cli versions prior to 7.10.4. The CVSS 4.0 base score is 7.7, indicating high severity. No official remediation level or patch information is provided in the available data.

If exploited, an attacker with control over a BOSH Director can execute arbitrary commands locally on an operator's workstation by injecting malicious OpenSSH options into the ssh process spawned by bosh-cli. This compromises the operator's system integrity and could lead to further escalation or data compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Operators should upgrade bosh-cli to version 7.10.4 or later once a fix is confirmed. Until then, limit access to the BOSH Director to trusted users and monitor for suspicious activity related to bosh-cli usage.