CVE-2026-15035

Name of the Vulnerable Software and Affected Versions bentoml OpenLLM version 0.6.30

Description Command injection is possible within the Model Repository Directory Name Handler component. This occurs when the cmd argument is manipulated in the async run command() function located in the src/openllm/common.py file. Successful exploitation requires local access to the system.

Recommendations As a temporary workaround, restrict access to the async run command() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.