Lucene search
+L

5 matches found

NVD
NVD
•added 2026/07/08 2:16 p.m.•33 views

CVE-2026-15035

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

7.8CVSS0.0222EPSS
SaveExploits1References7
osv_pysec
osv_pysec
•added 2026/07/08 2:16 p.m.•19 views

PYSEC-2026-2089

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

7.8CVSS5.5AI score0.0222EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2026/07/08 2:00 p.m.•19 views

CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

4.8CVSS5.9AI score
SaveExploits0References9
EUVD
EUVD
•added 2026/07/08 2:00 p.m.•23 views

EUVD-2026-42271

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

5.3CVSS5.5AI score0.0222EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/08 12:00 a.m.•11 views

CVE-2026-15035: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

7.8CVSS5.5AI score0.0222EPSS
SaveExploits1References9
Rows per page
Query Builder