Database/AI/ML frameworks & serving
BentoML (`bentofile.yaml`): Malicious build manifest
CVE-2026-44346AI/ML frameworks & servingcurated
Impact
Malicious build manifest → code execution in the build pipeline
Who can reach it
Customer-supplied build config
What to do
Upgrade to 1.4.39+; isolate build workers per tenant
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.