HighVulnerability
CVE-2026-24123: BentoML path traversal in bentofile.yaml file path fields
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-24123
- Published
- Record updated
- Affected
- bentoml < 1.4.34
- Fixed in
- 1.4.34
- released January 25, 2026, 1 day before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
BentoML versions before 1.4.34 let path traversal through the file path fields of bentofile.yaml, namely description, docker.setup_script, docker.dockerfile_template and conda.environment_yml. A crafted bentofile can make a victim's build copy arbitrary files, such as SSH keys, credentials and environment variables, into the bento archive, where they are exposed when the bento is pushed to a registry or deployed.
Mitigation
Fixed in 1.4.34, which contains a patch for the issue.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- bentomlPyPINo LLM dependency detected · 1 tracked dependent
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database