bentoml openllm vulnerabilities

Latest bentoml openllm CVEs

Newest publication first

1. CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

   Published 2026-07-08

   Medium·CVSS 4.8 EPSS 2.2%

   A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking local...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.