Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 23 |
|---|---|---|---|---|
 | Exploit for Deserialization of Untrusted Data in Bentoml | 3 May 202519:04 | – | githubexploit |
 | BentoML 1.x < 1.4.8 Arbitrary Code Execution | 6 May 202500:00 | – | nessus |
| BentoML 1.x < 1.4.8 Insecure Deserialization | 5 Aug 202500:00 | – | nessus |
 | CVE-2025-32375 | 8 Apr 202523:54 | – | circl |
 | BentoML 代码问题漏洞 | 9 Apr 202500:00 | – | cnnvd |
 | CVE-2025-32375 Insecure Deserialization leads to RCE in BentoML's runner server | 9 Apr 202515:30 | – | cvelist |
 | BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization | 9 Apr 202512:59 | – | github |
 | BentoML's runner server RCE | 23 Apr 202518:50 | – | metasploit |
 | CVE-2025-32375 | 9 Apr 202516:15 | – | nvd |
 | CVE-2025-32375 Insecure Deserialization leads to RCE in BentoML's runner server | 9 Apr 202515:30 | – | osv |
10
[
{
"vendor": "bentoml",
"product": "BentoML",
"versions": [
{
"version": ">= 1.0, < 1.4.8",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| args-number | request body | / | Insecure deserialization in BentoML runner server prior to 1.4.8 allows RCE via crafted POST with specific headers and payload. | CWE-502 |
| Content-Type | request body | / | Insecure deserialization in BentoML runner server prior to 1.4.8 allows RCE via crafted POST with specific headers and payload. | CWE-502 |
| Payload-Container | request body | / | Insecure deserialization in BentoML runner server prior to 1.4.8 allows RCE via crafted POST with specific headers and payload. | CWE-502 |
| Payload-Meta | request body | / | Insecure deserialization in BentoML runner server prior to 1.4.8 allows RCE via crafted POST with specific headers and payload. | CWE-502 |
| Batch-Size | request body | / | Insecure deserialization in BentoML runner server prior to 1.4.8 allows RCE via crafted POST with specific headers and payload. | CWE-502 |
| data | request body | / | Insecure deserialization in BentoML runner server prior to 1.4.8 allows RCE via crafted POST with specific headers and payload. | CWE-502 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 09:11Current
9.2High risk
Vulners AI Score9.2
CVSS 3.19.8
EPSS0.45773
SSVC