CVE-2026-112264 | BentoML up to 1.4.39 base.j2 template docker.env injection

October 19, 2026 Yanac

A vulnerability categorized as critical has been discovered in BentoML up to 1.4.39. The impacted element is an unknown function of the file base.j2 of the component base.j2 template. Executing a manipulation of the argument docker.env can lead to injection.

The identification of this vulnerability is CVE-2026-112264. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More