CVE-2026-15035
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A command injection vulnerability was found in OpenLLM 0.6.30 in the async_run_command function of src/openllm/common.py. A local attacker can manipulate the cmd argument to execute arbitrary system commands. The exploit is public and the project has not responded to the report.
Risk Assessment
The risk for the organization is local command execution by an attacker with command-line access, potentially leading to privilege escalation or data theft.
Recommendation
Immediately disable or isolate the vulnerable OpenLLM 0.6.30 instance and monitor for vendor updates. Until a patch is available, restrict local access to the system.
Original NVD description (English source)
A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.