A critical OS command injection vulnerability in BentoML enables unauthenticated remote attackers to execute arbitrary commands, creating a significant risk of system-wide compromise.

The vulnerability is identified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The CVSS vector (PR:N) specifies that no authentication is required, while the UI:R flag indicates that successful exploitation requires interaction from an authorized user.

A successful exploit could allow an attacker to gain full control over the server running BentoML, leading to data theft, lateral movement, or full system takeover. The CVSS score of 8.8 reflects the high severity and the potential for a complete technical impact on the affected infrastructure.

Immediate Action: Immediately update the BentoML library to version 1.4.39 or higher to eliminate the injection vulnerability.

Proactive Monitoring: Monitor for unexpected shell commands or child processes spawned by the BentoML application and review access logs for suspicious user interactions.

Compensating Controls: Utilize WAF rules to detect and block common OS command injection payloads and apply the principle of least privilege to the service account running the BentoML environment.

Public Exploit Available: Unknown.

This vulnerability poses a severe threat to the operational environment. All deployments of BentoML must be updated to version 1.4.39 immediately to mitigate the risk of remote command execution and ensure the long-term security of the platform.