CVE-2026-44345

Description

BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/bentoml/BentoML/security/advisories/GHSA-78f9-r8mh-4xm2
• https://github.com/bentoml/BentoML/security/advisories/GHSA-w2pm-x38x-jp44
• https://github.com/bentoml/BentoML
• https://github.com/advisories/GHSA-78f9-r8mh-4xm2

CWEs

CWE-78