PT-2026-39664 · Pypi · Bentoml

Ssjcorpsec · Published 2026-05-11 · Updated 2026-06-02 · CVE-2026-44346

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BentoML versions prior to 1.4.39

Description BentoML is a Python library used for building online serving systems optimized for AI applications and model inference. A flaw exists where a malicious bentofile.yaml file containing a newline-injected value in the envs[*].name variable can produce unquoted RUN directives in the generated Dockerfile. When the bentoml containerize command is executed on the imported bento, these RUN directives are executed on the host system during the docker build process.

Recommendations Update to version 1.4.39.

Exploit

Fix

Code Injection

OS Command Injection

Weakness Enumeration

CWE-94

CWE-78

Related Identifiers

CVE-2026-44346

GHSA-W2PM-X38X-JP44

PYSEC-2026-190

Affected Products

Bentoml

References · 10

• 🔥 https://github.com/bentoml/BentoML/security/advisories/GHSA-w2pm-x38x-jp44 · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-190 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w2pm-x38x-jp44 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44346 · Security Note
• https://github.com/bentoml/BentoML/security/advisories/GHSA-78f9-r8mh-4xm2 · Note
• https://github.com/bentoml/BentoML · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/bentoml/PYSEC-2026-190.yaml · Note
• https://twitter.com/CVEnew/status/2059718122781995068 · Twitter Post
• https://t.me/cveNotify/165633 · Telegram Post
• https://twitter.com/dailycve/status/2061854694499074057 · Twitter Post