CVE-2026-44346 Details
Description
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected value in envs[*].name produces unquoted RUN directives in the BentoML-generated Dockerfile. When the victim runs bentoml containerize on the imported bento, those RUN directives execute on the host during docker build. This vulnerability is fixed in 1.4.39.
A command injection vulnerability has been identified in BentoML versions through 1.4.38. The issue arises when a bentofile.yaml file contains a newline-injected value in the envs[*].name field, leading to unquoted RUN directives in the Dockerfile generated by BentoML. When the affected Bento is containerized, these RUN directives are executed on the host during the Docker build process, potentially allowing for unauthorized command execution. This vulnerability has been patched in BentoML version 1.4.39.
Users can upgrade to BentoML version 1.4.39 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/bentoml/BentoML/security/advisories/GHSA-w2pm-x38x-jp44 | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/bentoml/BentoML/security/advisories/GHSA-w2pm-x38x-jp44 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| bentoml bentoml | < 1.4.39 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 2, 2026 | Initial Analysis | [email protected] |
| May 28, 2026 | CVE Modified | CISA-ADP |
| May 27, 2026 | New CVE Received | [email protected] |