Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Vendor: bentoml Clear all filters
TI-2026-76464 CVE-2026-112264 · GHSA-rq23-h86h-7v4x

Dockerfile instruction injection in BentoML via docker.env keys

Priority HIGH 72

BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the legacy base.j2 t…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00218 Published 2026-10-19 No fix listed CWE-78
TI-2026-54391 CVE-2026-78205 · GHSA-x8r7-g3fv-cf37

BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space

Priority LOW 37

BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space (100.64.0.0/10, CGNAT).

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0041 Published 2026-08-24 No fix listed CWE-918
TI-2026-19441 CVE-2026-24123 · GHSA-6r62-w2q3-48hf

BentoML has a Path Traversal via Bentofile Configuration

Priority LOW 33

BentoML is a Python library for building online serving systems optimized for AI apps and model inference.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00491 Published 2026-01-26 Fixed in 1.4.34 CWE-22
TI-2024-08340 CVE-2024-8982 · GHSA-4vqf-pwq6-3wh3

Local File Inclusion in bentoml/openllm

Priority MEDIUM 61

A Local File Inclusion (LFI) vulnerability in OpenLLM version 0.6.10 allows attackers to include files from the local server through the web application.

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.00796 Published 2025-03-20 No fix listed CWE-29
TI-2024-08407 CVE-2024-9056 · GHSA-hw8j-hw49-752c

Denial of Service in bentoml/bentoml

Priority HIGH 72

BentoML version v1.3.4post1 is vulnerable to a Denial of Service (DoS) attack.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00725 Published 2025-03-20 No fix listed CWE-770
TI-2024-02720 CVE-2024-2912 · GHSA-hvj5-mvw9-93j3

Insecure Deserialization Leading to RCE in bentoml/bentoml

Priority HIGH 82

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution (RCE) by sending a specially crafted POST request.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01509 Published 2024-04-16 Fixed in 1.2.5 CWE-1188