Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/dockerfile/templates/base_v2.j2 interpolates docker.base_image raw with no escaping, newline filtering, or validation. A malicious bento.yaml with a multi-line docker.base_image value smuggles arbitrary Dockerfile directives into the generated Dockerfile, and bentoml containerize then runs docker build which executes the injected RUN directives on the victim host. This vulnerability is fixed in 1.4.39.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-27 | 1 | General1 |
| 2026-06-02 | 1 | Disclosure1 |
🔴 BentoML, Command Injection, #CVE-2026-44345 (High) -DC-Jun2026-111 https://dailycve.com/bentoml-command-injection-cve-2026-44345-high-dc-jun2026-111/
Post summary
The text announces a new high‑severity Command Injection vulnerability (CVE‑2026‑44345) in BentoML, without providing a PoC, exploit, or patch information.
CVE-2026-44345 BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/d… https://www.cve.org/CVERecord?id=CVE-2026-44345
Post summary
The post announces CVE-2026-44345 affecting BentoML and notes the issue existed before version 1.4.39, implying that this version addresses the vulnerability.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bentoml | bentoml | - | - | - |