CVE-2026-24123: BentoML Path Traversal Vulnerability in Bentofile Configuration
Summary
CVE-2026-24123: BentoML has a Path Traversal via Bentofile Configuration. Affects bentoml versions < 1.4.34. Fixed in 1.4.34. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
BentoML is an open-source framework designed for serving machine learning models. It simplifies the process of packaging, deploying, and managing ML models in production environments. The framework allows users to create 'bentos', which are self-contained bundles of models and their dependencies. However, a critical vulnerability has been identified in its configuration file, 'bentofile.yaml', which allows for path traversal attacks, potentially leading to unauthorized file access.
Vulnerability Detail
The vulnerability arises from BentoML's handling of user-provided file paths in the 'bentofile.yaml' configuration. Specifically, the framework does not adequately validate these paths, allowing attackers to exploit this weakness through various formats, including absolute paths, relative traversal, and environment variable expansions. This can lead to the exfiltration of sensitive files, such as SSH keys, credentials, and environment variables, especially in CI/CD environments. The lack of path containment checks in the resolution function poses a significant risk, enabling supply chain attacks where malicious bentos can be created and pushed to registries or cloud platforms, exposing sensitive information.
How To Fix
Latest published version: 1.4.39 as of 23 Oct 2026
pip install --upgrade "bentoml==1.4.39"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.4.34
This is the first release that contains the fix.
pip install --upgrade "bentoml==1.4.34"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users should avoid using untrusted 'bentofile.yaml' configurations and refrain from running 'bentoml build' on files from unknown sources. Additionally, users can manually inspect and sanitize any paths specified in the configuration to ensure they do not lead outside the intended directories.
Conclusion
The CVE-2026-24123 vulnerability in BentoML poses significant risks due to its potential for path traversal attacks through the bentofile configuration. Users are strongly advised to update to the latest version to mitigate these risks and ensure the security of their applications.
See every vulnerability recorded for bentoml →
FAQ
CVE-2026-24123 is a vulnerability in BentoML that allows for path traversal attacks through its bentofile configuration, potentially leading to unauthorized access to sensitive files.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors and alerts for open-source vulnerabilities without requiring installation.
The risks include unauthorized access to sensitive files, supply chain attacks, and potential exposure of credentials and environment variables, especially in CI/CD pipelines.
You can update BentoML to the patched version by running 'pip install --upgrade bentoml' in your terminal.
If immediate updates are not possible, avoid using untrusted bentofile configurations and manually inspect paths to ensure they do not lead outside the intended directories.
References
Related vulnerabilities
Recent vulnerabilities recorded for bentoml.
