CVE-2026-35043

Description

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the cloud deployment path in src/bentoml/_internal/cloud/deployment.py was not included in the fix for CVE-2026-33744. Line 1648 interpolates system_packages directly into a shell command using an f-string without any quoting. The generated script is uploaded to BentoCloud as setup.sh and executed on the cloud build infrastructure during deployment, making this a remote code execution on the CI/CD tier. This vulnerability is fixed in 1.4.38.

How to fix CVE-2026-35043

To remediate CVE-2026-35043, upgrade the affected package to a fixed version below.

• —upgrade to 1.4.38 or later
• —upgrade to 1.4.38 or later

Is CVE-2026-35043 being exploited?

Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 1.4.38
• from 0, < 1.4.38

CVSS scores

References (5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2026-33744
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2026-35043
• PATCHgithub.com/bentoml/BentoML
• WEBgithub.com/bentoml/BentoML/security/advisories/GHSA-fgv4-6jr3-jgfw