CVE-2026-112264 — BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys
BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env ma…
Published: 2026-10-19 · CVSS: 8.5 · CVSS 4.0
BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the legacy base.j2 template. Attackers can supply a crafted bentofile.yaml or imported bento archive so that bentoml containerize executes injected RUN instructions during docker build, accessing build secrets and poisoning images.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7