Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected value in envs[*].name produces unquoted RUN directives in the BentoML-generated Dockerfile. When the victim runs bentoml containerize on the imported bento, those RUN directives execute on the host during docker build. This vulnerability is fixed in 1.4.39.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-27 | 1 | Patch1 |
| 2026-06-02 | 1 | Disclosure1 |
🔴 BentoML, #OS Command Injection, #CVE-2026-44346 (High) -DC-Jun2026-119 https://dailycve.com/bentoml-os-command-injection-cve-2026-44346-high-dc-jun2026-119/
Post summary
The post announces a high‑severity OS command injection flaw (CVE-2026-44346) in BentoML, with no PoC, exploitation tools, or patch details disclosed.
CVE-2026-44346 BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a ne… https://www.cve.org/CVERecord?id=CVE-2026-44346
Post summary
The CVE highlights a BentoML flaw that can be triggered via a malicious bentofile.yaml, and the issue is addressed in version 1.4.39.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bentoml | bentoml | - | - | - |