{"schema":"vulnpedia.research/1","cve":"CVE-2026-112264","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/geo-chen/oss/blob/main/BentoML.md","tags":["third-party-advisory","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","url":"https://github.com/geo-chen/oss/blob/main/BentoML.md"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-19T18:08:19.307Z","url":"https://github.com/geo-chen/oss/blob/main/BentoML.md"},{"source":"nvd","sourceId":"CVE-2026-112264","modified":"2026-10-19T21:13:39.973","url":"https://github.com/geo-chen/oss/blob/main/BentoML.md"}]},{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/frontend/dockerfile/templates/base.j2","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/frontend/dockerfile/templates/base.j2"},{"source":"nvd","sourceId":"CVE-2026-112264","modified":"2026-10-19T21:13:39.973","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/frontend/dockerfile/templates/base.j2"}]},{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/bento/build_config.py","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/bento/build_config.py"},{"source":"nvd","sourceId":"CVE-2026-112264","modified":"2026-10-19T21:13:39.973","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/bento/build_config.py"}]},{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/generate.py","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/generate.py"},{"source":"nvd","sourceId":"CVE-2026-112264","modified":"2026-10-19T21:13:39.973","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/generate.py"}]},{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/__init__.py","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/__init__.py"},{"source":"nvd","sourceId":"CVE-2026-112264","modified":"2026-10-19T21:13:39.973","url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/__init__.py"}]},{"url":"https://www.vulncheck.com/advisories/bentoml-through-1.4.39-dockerfile-instruction-injection-via-docker-env-keys","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T13:55:14.430Z","url":"https://www.vulncheck.com/advisories/bentoml-through-1.4.39-dockerfile-instruction-injection-via-docker-env-keys"},{"source":"nvd","sourceId":"CVE-2026-112264","modified":"2026-10-19T21:13:39.973","url":"https://www.vulncheck.com/advisories/bentoml-through-1.4.39-dockerfile-instruction-injection-via-docker-env-keys"}]},{"source":"euvd","sourceId":"EUVD-2026-104309","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104309","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104309","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104309"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}