CVE-2026-112264— BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys
Quick assessment
Affected
bentoml BentoML
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
BentoML 1.4.39 及更早版本存在 Dockerfile 指令注入漏洞。攻击者可通过在由旧版 base.j2 模板渲染的 docker.env 映射键中嵌入换行符，注入任意构建指令。攻击者可提供特制的 bentofile.yaml 文件或导入的 Bento 归档包，使 命令在 Docker 构建过程中执行被注入的 RUN 指令，从而访问构建密钥并污染镜像。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112264
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys
Source: CVE Program / CVE List V5
Vulnerability Description
BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the legacy base.j2 template. Attackers can supply a crafted bentofile.yaml or imported bento archive so that bentoml containerize executes injected RUN instructions during docker build, accessing build secrets and poisoning images.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-112264
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112264
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-112264 (1)
Vendor Pages for CVE-2026-112264 (3)
Other References for CVE-2026-112264 (1)
IV. Related Vulnerabilities
Same product: BentoML
-
CVE-2026-78205
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery vi -
CVE-2026-44345
BentoML: Dockerfile command injection via docker.base_image -
CVE-2026-44346
BentoML: Dockerfile command injection via envs[*].name in be -
CVE-2026-40610
BentoML has Information Disclosure in `bentoml build` via sy -
CVE-2026-35044
BentoML has a Server-Side Template Injection via unsandboxed
Same vendor: bentoml
-
CVE-2026-78205
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery vi -
CVE-2026-15035
bentoml OpenLLM Model Repository Directory Name common.py as -
CVE-2026-44345
BentoML: Dockerfile command injection via docker.base_image -
CVE-2026-44346
BentoML: Dockerfile command injection via envs[*].name in be -
CVE-2026-40610
BentoML has Information Disclosure in `bentoml build` via sy
Same weakness: CWE-78
-
CVE-2026-112370
H3C Magic NX15 usrlist sub_416874 os command injection -
CVE-2026-112900
Pillow: Argument Injection in Ghostscript call, potentially -
CVE-2026-112301
orbitale imagemagick-php Command.php font os command injecti -
CVE-2026-112195
FusionPBX Dialplan Editor dialplan.php os command injection -
CVE-2026-112159
JumpServer Template Rendering os command injection
V. Comments for CVE-2026-112264
No comments yet