Is CVE-2026-112264 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-112264 being exploited in the wild.

How severe is CVE-2026-112264?

High severity, with a CVSS score of 7.8, published 19 October 2026.

Is there a fix for CVE-2026-112264?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-112264 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-112264?

Check whether you run Bentoml at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-112264: BentoML Dockerfile instruction injection in containerize

CVE-2026-112264 · Severity: high · CVSS 7.8 · Published 2026-10-19

BentoML is a framework that packages machine learning models into containers for deployment. A vulnerability in versions through 1.4.39 allows attackers to inject arbitrary Docker build commands by crafting malicious configuration files, potentially exposing build secrets and compromising container images during the build process.

Technologies: Bentoml. Vendors: BentoML.

Quick answers

Is CVE-2026-112264 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-112264 being exploited in the wild.
How severe is CVE-2026-112264?: High severity, with a CVSS score of 7.8, published 19 October 2026.
Which products and versions are affected?: Bentoml through 1.4.39.
Is there a fix for CVE-2026-112264?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-112264 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-112264?: Check whether you run Bentoml at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The legacy base.j2 template fails to properly sanitize docker.env mapping keys when rendering Dockerfiles, allowing newline injection. An attacker can supply a crafted bentofile.yaml or bento archive that, when processed by bentoml containerize, injects RUN instructions executed during docker build with full access to build-time secrets and the build context.

Affected products

BentoML BentoML through 1.4.39

Timeline

2026-10-19: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.