BentoML vulnerabilities and CVEs
The Beam CVE database tracks 16 security advisories for BentoML: 5 critical, 9 high and 2 medium severity. The newest is CVE-2026-44345, published May 11, 2026 and fixed in 1.4.39.
A framework for packaging and serving models as APIs.
Check your version: pip show bentoml
- Vulnerabilities tracked
- 16
- Critical
- 5
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-44345
BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)
high8.8May 11, 2026CVE-2026-44346
Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)
high8.8May 11, 2026CVE-2026-40610
BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context
medium5.5May 7, 2026CVE-2026-35043
BentoML: Command Injection in cloud deployment setup script
high7.8Apr 3, 2026CVE-2026-35044
BentoML: SSTI via Unsandboxed Jinja2 in Dockerfile Generation
high8.8Apr 3, 2026CVE-2026-33744
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
high7.8Mar 26, 2026CVE-2026-27905
BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction
high8.6Mar 3, 2026CVE-2026-24123
BentoML has a Path Traversal via Bentofile Configuration
high7.4Jan 26, 2026CVE-2025-54381
BentoML SSRF Vulnerability in File Upload Processing
critical9.9Jul 29, 2025CVE-2025-32375
BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization
critical9.8Apr 9, 2025CVE-2025-27520
BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
critical9.8Apr 4, 2025CVE-2024-9056
BentoML Denial of Service (DoS) via Multipart Boundary
high7.5No fixMar 20, 2025CVE-2024-9070
BentoML deserialization vulnerability
critical9.8No fixMar 20, 2025GHSA-564p-rx2q-4c8v
BentoML Open Redirect vulnerability
medium6.1No fixMar 20, 2025GHSA-hh3j-9m59-p8vc
BentoML vulnerable to Uncontrolled Resource Consumption
high7.5No fixMar 20, 2025CVE-2024-2912
Insecure deserialization in BentoML
critical9.8Apr 16, 2024