CVE-2026-35044 - Vulnerability Analysis

Overview

BentoML < 1.4.38 contains a template injection caused by unsandboxed jinja2.Environment with jinja2.ext.do extension in Dockerfile generation, letting attackers execute arbitrary Python code on the host, exploit requires importing a malicious bento archive and running containerize.

Severity & Score

Impact

Attackers can execute arbitrary Python code on the host, bypassing container isolation and potentially compromising the entire system.

Mitigation

Update to version 1.4.38 or later.

References

• https://github.com/bentoml/BentoML/security/advisories/GHSA-v959-cwq9-7hr6

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner