openlayer (0.0.0a0), sentencebertservice (20211205152102.0.0) +1 more potentially affected by CVE-2026-27905 via bentoml (0.13.1)

bentoml PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - openlayer 0.0.0a0 - sentencebertservice 20211205152102.0.0 - unboxapi =0.1.1, =0.3.0 Source cves: CVE-2026-27905 Source advisory:...

PT-2026-22843

Name of the Vulnerable Software and Affected Versions BentoML versions prior to 1.4.36 Description BentoML, a Python library used for building online serving systems for AI applications, contains a flaw in the safe extract tarfile function. This function inadequately validates symlink targets...

BentoML post-link vulnerability

BentoML is an open-source model service library developed by BentoML. It is used to build high-performance and scalable artificial intelligence applications using Python. Prior to BentoML 1.4.36, there was a post-link vulnerability. This vulnerability stemmed from the safeextracttarfile function,...

CVE-2026-27905: Improper Link Resolution Before File Access

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safeextracttarfile function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path,...

BentoML < 1.4.34 Path Traversal

The version of the BentoML library installed on the remote host is prior to 1.4.34. It is, therefore, affected by a path traversal vulnerability: - BentoML's bentofile.yaml configuration allows path traversal attacks through multiple file path fields description, docker.setupscript,...

BentoML v1.3.9 - Open Redirect

An open redirect vulnerability exists in BentoML v1.3.9, where the file parameter in the /ui/gradioapi/file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-12760 inf...

CVE-2026-24123

Summary: CVE-2026-24123 affects BentoML before version 1.4.34, enabling path traversal via bentofile.yaml fields (description, docker.setup_script, docker.dockerfile_template, conda.environment_yml). An attacker can craft a malicious bentofile that, when built, exfiltrates arbitrary files from th...

ai-dynamo (>=0.1.0, <=0.3.0), bento2seldon (>=0.1.0, <=0.4.0) +16 more potentially affected by CVE-2026-24123 via bentoml (>=0.9.2, <=1.4.8)

bentoml PYPI version =0.9.2, =0.1.0, =0.1.0, =0.1.0, =0.0.10, =0.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.0.1, =0.0.1, =0.0.13 and more Source cves: CVE-2026-24123 Source advisory: MEND:CVE-2026-24123...

CVE-2026-24123 BentoML has a Path Traversal via Bentofile Configuration

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to version 1.4.34, BentoML's bentofile.yaml configuration allows path traversal attacks through multiple file path fields description, docker.setupscript, docker.dockerfiletemplate,...

bentoutils (0.0.10), ersilia (>=0.0.1, <=0.0.3) +3 more potentially affected by CVE-2026-24123 via bentoml (0.9.2)

bentoml PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - bentoutils 0.0.10 - ersilia =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-24123 Source advisory: OSV:GHSA-6R62-W2Q3-48HF...

openlayer (0.0.0a0), sentencebertservice (20211205152102.0.0) +1 more potentially affected by CVE-2026-24123 via bentoml (0.13.1)

bentoml PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - openlayer 0.0.0a0 - sentencebertservice 20211205152102.0.0 - unboxapi =0.1.1, =0.3.0 Source cves: CVE-2026-24123 Source advisory:...

bentoutils (>=0.0.35, <=0.1.1), qandaxfmrartifact (>=0.0.6, <=0.0.7) +3 more potentially affected by CVE-2026-24123 via bentoml (0.10.1)

bentoml PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - bentoutils =0.0.35, =0.0.6, =0.0.5, =0.0.3, =0.0.4 Source cves: CVE-2026-24123 Source advisory: OSV:GHSA-6R62-W2Q3-48HF...

bento2seldon (>=0.1.0, <=0.4.0), bento2seldon4recsys (>=0.1.0, <=0.1.3) potentially affected by CVE-2026-24123 via bentoml (0.12.1)

bentoml PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - bento2seldon =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-24123 Source advisory: OSV:GHSA-6R62-W2Q3-48HF...

BentoML has a Path Traversal via Bentofile Configuration

Summary BentoML's bentofile.yaml configuration allows path traversal attacks through multiple file path fields description, docker.setupscript, docker.dockerfiletemplate, conda.environmentyml. An attacker can craft a malicious bentofile that, when built by a victim, exfiltrates arbitrary files fr...

Directory Traversal

Overview bentoml is a BentoML: Build Production-Grade AI Applications Affected versions of this package are vulnerable to Directory Traversal via the processing of user-supplied file paths in configuration fields description, docker.setupscript, docker.dockerfiletemplate, and conda.environmentyml...

ai-dynamo (>=0.1.0, <=0.3.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2026-24123 via bentoml (>=1.0.0a7, <=1.4.8)

bentoml PYPI version =1.0.0a7, =0.1.0, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.30 - raptor-labsdk 0.3.2 Source cves: CVE-2026-24123 Source advisory: GHSA-6R62-W2Q3-48HF...

ai-dynamo (>=0.1.0, <=0.3.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2026-24123 via bentoml (>=1.0.0a7, <=1.4.8)

bentoml PYPI version =1.0.0a7, =0.1.0, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.30 - raptor-labsdk 0.3.2 Source cves: CVE-2026-24123 Source advisory: SNYK:PYTHON-BENTOML-15123972...

ai-dynamo (>=0.1.0, <=0.3.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2026-24123 via bentoml (>=1.0.0a7, <=1.4.8)

bentoml PYPI version =1.0.0a7, =0.1.0, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.30 - raptor-labsdk 0.3.2 Source cves: CVE-2026-24123 Source advisory: OSV:GHSA-6R62-W2Q3-48HF...

ersilia (>=0.0.5, <=0.1.1) potentially affected by CVE-2026-24123 via bentoml (0.11.0)

bentoml PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - ersilia =0.0.5, =0.1.1 Source cves: CVE-2026-24123 Source advisory: OSV:GHSA-6R62-W2Q3-48HF...

CVE-2026-24123: Improper Limitation of a Pathname to a Restricted Directory

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to version 1.4.34, BentoML's bentofile.yaml configuration allows path traversal attacks through multiple file path fields description, docker.setupscript, docker.dockerfiletemplate,...