Dockerfile Instruction Injection Vulnerability in BentoML by BentoML

CVE-2026-112264

What is CVE-2026-112264?

BentoML, prior to version 1.4.39, is vulnerable to a Dockerfile instruction injection issue that enables attackers to introduce arbitrary build instructions by manipulating newlines in docker.env mapping keys. This exploitation can occur when attackers craft either a bentofile.yaml or an imported bento archive, causing the bentoml containerize function to execute these malicious RUN instructions during the docker build process. As a result, sensitive build secrets may be exposed, and images could become compromised.

References