Skip to content
OpenAdvisories

Product · bentoml

OpenLLM

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-15035

    bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

    A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injec…

    bentoml OpenLLM bentoml PyPI