TI-2025-34190 CVE-2025-54381 · GHSA-mrmq-3q62-6cc8
BentoML is Vulnerable to an SSRF Attack Through File Upload Processing
Priority HIGH 82
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
bentoml
Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
bentoml records in CISA KEVNo bentoml vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records
TI-2025-23454 CVE-2025-32375 · GHSA-7v4r-c989-xh26
Insecure Deserialization leads to RCE in BentoML's runner server
Priority HIGH 82
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2025-20352 CVE-2025-27520 · GHSA-33xw-247w-6hmc
BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
Priority HIGH 82
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2024-08420 CVE-2024-9070 · GHSA-9g44-gwvm-hc44
Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
Priority HIGH 82
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1.
TI-2024-02720 CVE-2024-2912 · GHSA-hvj5-mvw9-93j3
Insecure Deserialization Leading to RCE in bentoml/bentoml
Priority HIGH 82
An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution (RCE) by sending a specially crafted POST request.
TI-2026-27247 CVE-2026-35044 · GHSA-v959-cwq9-7hr6
BentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generation
Priority HIGH 76
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-32312 CVE-2026-44346 · GHSA-w2pm-x38x-jp44
BentoML: Dockerfile command injection via envs[*].name in bentofile.yaml
Priority HIGH 73
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-32311 CVE-2026-44345 · GHSA-78f9-r8mh-4xm2
BentoML: Dockerfile command injection via docker.base_image
Priority HIGH 73
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-76464 CVE-2026-112264 · GHSA-rq23-h86h-7v4x
Dockerfile instruction injection in BentoML via docker.env keys
Priority HIGH 72
BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the legacy base.j2 t…
TI-2026-22249 CVE-2026-27905 · GHSA-m6w7-qv66-g3mf
BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction
Priority HIGH 72
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2024-08407 CVE-2024-9056 · GHSA-hw8j-hw49-752c
Denial of Service in bentoml/bentoml
Priority HIGH 72
BentoML version v1.3.4post1 is vulnerable to a Denial of Service (DoS) attack.
TI-2026-27246 CVE-2026-35043 · GHSA-fgv4-6jr3-jgfw
BentoML: command injection in cloud deployment setup script (deployment.py)
Priority HIGH 69
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-26123 CVE-2026-33744 · GHSA-jfjg-vc52-wqvf
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
Priority HIGH 69
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2024-08340 CVE-2024-8982 · GHSA-4vqf-pwq6-3wh3
Local File Inclusion in bentoml/openllm
Priority MEDIUM 61
A Local File Inclusion (LFI) vulnerability in OpenLLM version 0.6.10 allows attackers to include files from the local server through the web application.
TI-2026-29345 CVE-2026-40610 · GHSA-mcfx-4vc6-qgxv
BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context
Priority MEDIUM 58
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-12655 CVE-2026-15035 · GHSA-6499-56p8-f7rq
bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection
Priority MEDIUM 55
A vulnerability was found in bentoml OpenLLM 0.6.30.
TI-2026-54391 CVE-2026-78205 · GHSA-x8r7-g3fv-cf37
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
Priority LOW 37
BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space (100.64.0.0/10, CGNAT).
TI-2026-19441 CVE-2026-24123 · GHSA-6r62-w2q3-48hf
BentoML has a Path Traversal via Bentofile Configuration
Priority LOW 33
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.