CVE-2026-112264
Received Received - Intake

Dockerfile Instruction Injection in BentoML

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulnCheck

Description
BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the legacy base.j2 template. Attackers can supply a crafted bentofile.yaml or imported bento archive so that bentoml containerize executes injected RUN instructions during docker build, accessing build secrets and poisoning images.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112264
EUVD
EUVD-2026-104309

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
bentoml BentoML 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Dockerfile instruction injection flaw in BentoML versions up to 1.4.39. Attackers can inject arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the legacy base.j2 template. This allows malicious RUN commands to be executed during Docker image builds, potentially accessing build secrets and poisoning the resulting images.

Detection Guidance

Check for BentoML versions up to 1.4.39 using commands like 'pip show bentoml' or 'bentoml --version'. Inspect bentofile.yaml or bento archives for newline characters in docker.env keys. Review Dockerfiles generated by 'bentoml containerize' for unexpected RUN instructions.

Impact Analysis

An attacker could compromise your Docker builds by injecting malicious commands through a crafted bentofile.yaml or bento archive. This could lead to unauthorized access to build secrets, manipulation of the build process, or distribution of compromised Docker images. The attack requires a victim to run 'bentoml containerize' on a malicious bento.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data during builds, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Compromised Docker images may also violate compliance mandates for software integrity and supply chain security.

Mitigation Strategies

Upgrade BentoML to a patched version if available. Avoid using the vulnerable 'bentoml containerize' command with untrusted bentofile.yaml or bento archives. Review and sanitize docker.env keys in build configurations to prevent newline injection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112264. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart