CVE-2026-44345

8.8 HIGH

BentoML is a Python library for building online serving systems optimized for AI apps and model inference

Published: 2026-05-27 · Last updated: 2026-06-02

Severity and scoring

CVSS: 8.8 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE: CWE-78

Affected products

Vendor	Product
bentoml	bentoml

Description

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/dockerfile/templates/base_v2.j2 interpolates docker.base_image raw with no escaping, newline filtering, or validation. A malicious bento.yaml with a multi-line docker.base_image value smuggles arbitrary Dockerfile directives into the generated Dockerfile, and bentoml containerize then runs docker build which executes the injected RUN directives on the victim host. This vulnerability is fixed in 1.4.39.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-44345
[Vendor advisory]https://github.com/bentoml/BentoML/security/advisories/GHSA-78f9-r8mh-4xm2
[Vendor advisory]https://github.com/bentoml/BentoML/security/advisories/GHSA-78f9-r8mh-4xm2

Related CVEs

Same vendor

CVE-2026-44346 — BentoML is a Python library for building online serving systems optimized for AI apps and model inference (8.8 HIGH)
CVE-2026-40610 — BentoML is a Python library for building online serving systems optimized for AI apps and model inference (5.5 MEDIUM)

Same CWE

CVE-2026-22313 — The device has a webserver that exposes a REST API authenticated with a token on the management network (9.1 CRITICAL)
CVE-2026-44932 — Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a ... (8.8 HIGH)
CVE-2026-12398 — A command injection vulnerability was found in galaxy_ng (7.5 HIGH)
CVE-2026-5416 — Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command in... (8.8 HIGH)
CVE-2026-12161 — Improper input validation in the SSH Elevate Shell feature in Devolutions Remote Desktop Manager 2026.2.7 allows an authenticated user ... (8.8 HIGH)