CVE-2026-35043: BentoML: command injection in cloud deployment setup script (deployment.py)

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-04-06 · updated 2026-10-23
Weakness: CWE-78

Description

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the cloud deployment path in src/bentoml/_internal/cloud/deployment.py was not included in the fix for CVE-2026-33744. Line 1648 interpolates system_packages directly into a shell command using an f-string without any quoting. The generated script is uploaded to BentoCloud as setup.sh and executed on the cloud build infrastructure during deployment, making this a remote code execution on the CI/CD tier. This vulnerability is fixed in 1.4.38.

Affected products

BentoML: before 1.4.38 — fixed in 1.4.38

How to fix

Upgrade to a fixed version: BentoML 1.4.38. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-35043 or the next vulnerability affects your stack