Database/AI/ML frameworks & serving
BentoML (Dockerfile generation): Injection into generated Dockerfile
CVSS 8.8CVE-2026-35044AI/ML frameworks & servingcurated
Impact
Injection into generated Dockerfile → build-time code execution
Who can reach it
Customer-supplied bentofile.yaml built by a provider-run build service
What to do
Provider-owned if the provider offers managed builds: a tenant's build manifest executes in the provider's builder
References
Related entries
- Jupyter Server: Path traversal in the REST APICVE-2026-35397 · Jupyter ServerHigh
- LiteLLM (`/guardrails/test_custom_code`): RCE via bytecode rewritingCVE-2026-40217 · LiteLLM (`/guardrails/test_custom_code`)High
- Ray Data (Arrow extension types): Custom Arrow extension types deserialized unsafelyCVE-2026-41486 · Ray Data (Arrow extension types)High
- JupyterLab: extension allow-list not enforced, letting a notebook user install arbitrary PyPI packagesCVE-2026-42266 · JupyterLab (PyPI Extension Manager, allowed_extensions_uris allow-list)High
- LiteLLM proxy: Two endpoints allow privilege escalation / unauthorized actionCVE-2026-42271 · LiteLLM proxyHigh
- BentoML (`bentofile.yaml`): Malicious build manifestCVE-2026-44346 · BentoML (`bentofile.yaml`)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.