CVE-2026-40610

Description

BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/bentoml/BentoML/commit/5fb7cd41f92e2a56b45391284cf15b9ac9963a1f
• https://github.com/bentoml/BentoML/releases/tag/v1.4.39
• https://github.com/bentoml/BentoML/security/advisories/GHSA-mcfx-4vc6-qgxv
• https://github.com/bentoml/BentoML
• https://github.com/advisories/GHSA-mcfx-4vc6-qgxv

CWEs

CWE-59