https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:48:44 +0000 https://cve.radiocsirt.org/vuln/cve-2026-27905 <p><strong>Affected:</strong> BentoML</p> <p>BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function validates that each tar member&#39;s path is within the destination directory, but for symlink members it only validates the symlink&#39;s own path, not the symlink&#39;s target. An attacker can create a malicious bento/model tar file containing a symlink pointing outside the extraction directory, followed by a regular file that writes through the symlink, achieving arbitrary file write on the host filesystem. This vulnerability is fixed in 1.4.36.</p> <p><strong>Affected:</strong> BentoML</p> <p>BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function validates that each tar member&#39;s path is within the destination directory, but for symlink members it only validates the symlink&#39;s own path, not the symlink&#39;s target. An attacker can create a malicious bento/model tar file containing a symlink pointing outside the extraction directory, followed by a regular file that writes through the symlink, achieving arbitrary file write on the host filesystem. This vulnerability is fixed in 1.4.36.</p> https://cve.radiocsirt.org/vuln/cve-2026-27905