Vulnerability · Published Jan 26, 2026 · Assigned by GitHub_M

CVE-2026-24123BentoML has a Path Traversal via Bentofile Configuration

High 7.4

In plain English

A high-severity path traversal in BentoML from bentoml. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.5%top 57.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to version 1.4.34, BentoML's `bentofile.yaml` configuration allows path traversal attacks through multiple file path fields (`description`, `docker.setup_script`, `docker.dockerfile_template`, `conda.environment_yml`). An attacker can craft a malicious bentofile that, when built by a victim, exfiltrates arbitrary files from the filesystem into the bento archive. This enables supply chain attacks where sensitive files (SSH keys, credentials, environment variables) are silently embedded in bentos and exposed when pushed to registries or deployed. Version 1.4.34 contains a patch for the issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	bentoml	1.4.34	GHSA-6r62-w2q3-48hf
PyPI	bentoml	1.4.34	PYSEC-2026-1218

Affected products (as reported)

Vendor	Product	Versions
bentoml	BentoML	< 1.4.34

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

References

https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf x_refsource_CONFIRM
https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4 x_refsource_MISC
https://github.com/bentoml/BentoML/releases/tag/v1.4.34 x_refsource_MISC