Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4wp2-p85j-s7dr
Vulnerability ID VCID-4wp2-p85j-s7dr
Aliases CVE-2026-24123
GHSA-6r62-w2q3-48hf
Summary BentoML has a Path Traversal via Bentofile Configuration BentoML's `bentofile.yaml` configuration allows path traversal attacks through multiple file path fields (`description`, `docker.setup_script`, `docker.dockerfile_template`, `conda.environment_yml`). An attacker can craft a malicious bentofile that, when built by a victim, exfiltrates arbitrary files from the filesystem into the bento archive. This enables supply chain attacks where sensitive files (SSH keys, credentials, environment variables) are silently embedded in bentos and exposed when pushed to registries or deployed.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2026-24123
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-6r62-w2q3-48hf
cvssv3.1 7.4 https://github.com/bentoml/BentoML
generic_textual HIGH https://github.com/bentoml/BentoML
cvssv3.1 7.4 https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4
generic_textual HIGH https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4
ssvc Track https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4
cvssv3.1 7.4 https://github.com/bentoml/BentoML/releases/tag/v1.4.34
generic_textual HIGH https://github.com/bentoml/BentoML/releases/tag/v1.4.34
ssvc Track https://github.com/bentoml/BentoML/releases/tag/v1.4.34
cvssv3.1 7.4 https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf
cvssv3.1_qr HIGH https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf
generic_textual HIGH https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf
ssvc Track https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf
cvssv3.1 7.4 https://nvd.nist.gov/vuln/detail/CVE-2026-24123
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2026-24123
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-24123
https://github.com/bentoml/BentoML
https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4
https://github.com/bentoml/BentoML/releases/tag/v1.4.34
CVE-2026-24123 https://nvd.nist.gov/vuln/detail/CVE-2026-24123
GHSA-6r62-w2q3-48hf https://github.com/advisories/GHSA-6r62-w2q3-48hf
GHSA-6r62-w2q3-48hf https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Found at https://github.com/bentoml/BentoML
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Found at https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-27T21:36:54Z/ Found at https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Found at https://github.com/bentoml/BentoML/releases/tag/v1.4.34
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-27T21:36:54Z/ Found at https://github.com/bentoml/BentoML/releases/tag/v1.4.34
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Found at https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-27T21:36:54Z/ Found at https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-24123
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.0343
EPSS Score 0.00015
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-02T04:49:43.868183+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bentoml/CVE-2026-24123.yml 38.6.0