Arbitrary Command Execution Vulnerability in BentoML by Bentoml

CVE-2026-33744

What is CVE-2026-33744?

BentoML, a Python library for creating online serving systems tailored for AI applications, contains a vulnerability in its bentofile.yaml configuration file. Prior to version 1.4.37, the docker.system_packages field allowed users to specify arbitrary strings. These strings were directly interpolated into Dockerfile RUN commands without proper sanitization, posing a risk of arbitrary command execution during the bentoml containerize or docker build processes. This flaw could lead to significant security breaches if exploited by an attacker, especially since the system_packages field is intended for valid OS package names. Version 1.4.37 addresses this critical issue, enhancing the overall security of the library.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References