CVE-2026-15035CWE-74CWE-77

bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

Medium · published July 8, 2026

CVSS v4.0
4.8
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.02220 · 82.5th percentile
Weaknesses
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'); CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2026-07-08T14:00Z
EPSS history
Timeline
  • 08 JUL 14:00Z
    bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection
    cvelistv5