Skip to content
OpenAdvisories

Package · PyPI

bentoml

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-15035

    bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

    A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injec…

    bentoml OpenLLM bentoml PyPI
  • Medium 5.5
    CVE-2026-40610

    BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attacker-controlled symlinks inside the build context and copies the referenced file …

    bentoml BentoML bentoml PyPI
  • Medium 6.1
    GHSA-564p-rx2q-4c8v

    BentoML Open Redirect vulnerability

    An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.

    bentoml PyPI