Arbitrary Command Injection

Overview openllm is an OpenLLM: Self-hosting LLMs Made Easy. Affected versions of this package are vulnerable to Arbitrary Command Injection via the asyncruncommand function in the Model Repository Directory Name Handler process. An attacker can execute arbitrary system commands by manipulating t...

EUVD-2025-6886

Malicious code in bioql PyPI...

CVE-2024-8982

A Local File Inclusion LFI vulnerability in OpenLLM version 0.6.10 allows attackers to include files from the local server through the web application. This flaw could expose internal server files and potentially sensitive information such as configuration files, passwords, and other critical dat...

CVE-2024-8982

CVE-2024-8982 affects OpenLLM 0.6.10 with a Local File Inclusion (LFI) vulnerability that allows an attacker to include files from the local server via the web application. Public descriptions consistently cite exposure of internal files and sensitive data (e.g., configuration files, user credent...

CVE-2024-8982 Local File Inclusion in bentoml/openllm

A Local File Inclusion LFI vulnerability in OpenLLM version 0.6.10 allows attackers to include files from the local server through the web application. This flaw could expose internal server files and potentially sensitive information such as configuration files, passwords, and other critical dat...