TI-2025-34190 CVE-2025-54381 · GHSA-mrmq-3q62-6cc8
BentoML is Vulnerable to an SSRF Attack Through File Upload Processing
Priority HIGH 82
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
bentoml
Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
bentoml records in CISA KEVNo bentoml vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Bentoml · all components
TI-2025-23454 CVE-2025-32375 · GHSA-7v4r-c989-xh26
Insecure Deserialization leads to RCE in BentoML's runner server
Priority HIGH 82
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2025-20352 CVE-2025-27520 · GHSA-33xw-247w-6hmc
BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
Priority HIGH 82
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-27247 CVE-2026-35044 · GHSA-v959-cwq9-7hr6
BentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generation
Priority HIGH 76
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-32312 CVE-2026-44346 · GHSA-w2pm-x38x-jp44
BentoML: Dockerfile command injection via envs[*].name in bentofile.yaml
Priority HIGH 73
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-32311 CVE-2026-44345 · GHSA-78f9-r8mh-4xm2
BentoML: Dockerfile command injection via docker.base_image
Priority HIGH 73
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-22249 CVE-2026-27905 · GHSA-m6w7-qv66-g3mf
BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction
Priority HIGH 72
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-27246 CVE-2026-35043 · GHSA-fgv4-6jr3-jgfw
BentoML: command injection in cloud deployment setup script (deployment.py)
Priority HIGH 69
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-26123 CVE-2026-33744 · GHSA-jfjg-vc52-wqvf
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
Priority HIGH 69
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-29345 CVE-2026-40610 · GHSA-mcfx-4vc6-qgxv
BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context
Priority MEDIUM 58
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
TI-2026-19441 CVE-2026-24123 · GHSA-6r62-w2q3-48hf
BentoML has a Path Traversal via Bentofile Configuration
Priority LOW 33
BentoML is a Python library for building online serving systems optimized for AI apps and model inference.