id: PYSEC-2026-2089
published: "2026-07-08T14:16:56.643Z"
modified: "2026-07-10T10:08:24.114083Z"
aliases:
- CVE-2026-15035
details: A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
affected:
- package:
    name: bentoml
    ecosystem: PyPI
    purl: pkg:pypi/bentoml
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - last_affected: 0.6.30
  versions:
  - 0.0.1
  - 0.0.2
  - 0.0.3
  - 0.0.5
  - 0.0.6a0
  - 0.0.7
  - 0.0.7.dev0
  - 0.0.8
  - 0.0.8.post1
  - 0.0.9
  - 0.1.1
  - 0.1.2
  - 0.2.0
  - 0.2.1
  - 0.2.2
  - 0.3.0
  - 0.3.1
  - 0.3.3
  - 0.3.4
  - 0.4.0
  - 0.4.1
  - 0.4.2
  - 0.4.3
  - 0.4.4
  - 0.4.5
  - 0.4.7
  - 0.4.8
  - 0.4.9
  - 0.5.0
  - 0.5.1
  - 0.5.2
  - 0.5.3
  - 0.5.4
  - 0.5.5
  - 0.5.6
  - 0.5.7
  - 0.5.8
  - 0.6.0
  - 0.6.1
  - 0.6.2
  - 0.6.3
  ecosystem_specific: {}
references:
- type: WEB
  url: https://github.com/bentoml/OpenLLM/
- type: ADVISORY
  url: https://vuldb.com/cve/CVE-2026-15035
- type: ADVISORY
  url: https://vuldb.com/vuln/376786
- type: REPORT
  url: https://vuldb.com/vuln/376786/cti
- type: FIX
  url: https://github.com/bentoml/OpenLLM/issues/1229
- type: FIX
  url: https://github.com/bentoml/OpenLLM/pull/1235
- type: EVIDENCE
  url: https://vuldb.com/submit/850895
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H