{"data":{"id":"adcb521f-8a86-47a7-8cbe-59d6f4dc71be","title":"GHSA-mcfx-4vc6-qgxv: BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context","summary":"BentoML's `bentoml build` packaging workflow follows symlinks inside the build context and copies the referenced file contents into the generated Bento artifact. The `os.walk` loop in the packaging code calls `shutil.copy` without checking that the resolved path stays inside `ctx_path`. An attacker who gets a developer or CI system to build an attacker-controlled repository can exfiltrate local files such as cloud credentials or SSH keys, and the leak can spread through export, push, or containerization. The issue was verified against BentoML 1.4.38.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-mcfx-4vc6-qgxv","publishedAt":"2026-05-07T16:39:47.000Z","cveId":"CVE-2026-40610","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["bentoml@<= 1.4.38 (fixed: 1.4.39)"],"affectedPackageNames":["bentoml"],"affectedPackageRefs":["pypi:bentoml"],"affectedVendors":[],"affectedVendorsRaw":["BentoML"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00284,"epssCheckedAt":"2026-11-10T18:05:34.248Z","kevDateAdded":null,"advisoryAliases":["GHSA-mcfx-4vc6-qgxv"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-07T16:39:47.000Z","fixReleasedAt":"2026-05-07T10:38:13.384Z","daysToFix":0,"fixCheckedAt":"2026-10-29T21:36:44.314Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"bentoml","fixedVersion":"1.4.39","matchedVersion":"1.4.39","fixReleasedAt":"2026-05-07T10:38:13.384Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:44.168Z"}]}}