PT-2026-38613 · Bentoml+1 · Bentoml

Larlarua · Published 2026-05-07 · Updated 2026-05-26 · CVE-2026-40610

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BentoML versions prior to 1.4.39

Description The bentoml build packaging workflow follows attacker-controlled symlinks within the build context and copies the referenced file contents into the generated Bento artifact. This occurs because the system does not validate if the resolved path of a file remains inside the build context before dereferencing the source path. An attacker can place a symlink pointing to sensitive local files on the build host, such as cloud credentials, SSH keys, API tokens, or environment files. When the build process runs, these files are packaged into the Bento artifact and can be further leaked through export, push, or containerization workflows.

Recommendations Update to version 1.4.39.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-40610

GHSA-MCFX-4VC6-QGXV

Affected Products

Bentoml

References · 9

• 🔥 https://github.com/bentoml/BentoML/security/advisories/GHSA-mcfx-4vc6-qgxv · Exploit
• https://github.com/bentoml/BentoML/commit/5fb7cd41f92e2a56b45391284cf15b9ac9963a1f · Patch
• https://osv.dev/vulnerability/GHSA-mcfx-4vc6-qgxv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40610 · Security Note
• https://github.com/bentoml/BentoML/releases/tag/v1.4.39 · Note
• https://github.com/bentoml/BentoML · Note
• https://t.me/cveNotify/164718 · Telegram Post
• https://twitter.com/CVEnew/status/2058155782110396488 · Twitter Post
• https://t.me/CVEtracker/54672 · Telegram Post