{"data":{"id":"a6f15166-325d-42ef-9763-85cff77243ce","title":"CVE-2026-24123: BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to…","summary":"BentoML versions before 1.4.34 let path traversal through the file path fields of bentofile.yaml, namely description, docker.setup_script, docker.dockerfile_template and conda.environment_yml. A crafted bentofile can make a victim's build copy arbitrary files, such as SSH keys, credentials and environment variables, into the bento archive, where they are exposed when the bento is pushed to a registry or deployed.","solution":"Fixed in 1.4.34, which contains a patch for the issue.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-24123","publishedAt":"2026-01-27T04:16:08.460Z","cveId":"CVE-2026-24123","cweIds":["CWE-22"],"cvssScore":"7.4","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["bentoml@< 1.4.34 (fixed: 1.4.34)"],"affectedPackageNames":["bentoml"],"affectedPackageRefs":["pypi:bentoml"],"affectedVendors":[],"affectedVendorsRaw":["BentoML"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"BentoML path traversal in bentofile.yaml file path fields","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00491,"epssCheckedAt":"2026-11-04T12:08:35.001Z","kevDateAdded":null,"advisoryAliases":["GHSA-6r62-w2q3-48hf"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:08.786Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-01-26T03:20:34.722Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:42:00.055Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"bentoml","fixedVersion":"1.4.34","matchedVersion":"1.4.34","fixReleasedAt":"2026-01-26T03:20:34.722Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:59.906Z"}]}}