BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containin…

CVE-2026-44346 affects BentoML, a Python library for AI model serving systems. Prior to version 1.4.39, malicious bentofile.yaml files with newline-injected values in environment names can create unquoted RUN directives in generated Dockerfiles. When victims run 'bentoml containerize' on imported bentos, these directives execute arbitrary commands on the host during docker build. This represents a command injection vulnerability that could allow attackers to execute malicious code on developer systems. The vulnerability has been fixed in BentoML version 1.4.39.