CVE-2022-41835: F5 f5os-A

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.

Affected products

• F5 f5os-A: from 1.0.0, before 1.1.0 (fixed in 1.1.0)
• F5 f5os-C: after 1.3.0, before 1.5.0 (fixed in 1.5.0)

Published 2022-10-19. Last modified 2026-06-17.