CVE-2025-54381 BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP...

CVE-2025-54381 BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: MEND:CVE-2025-54381...

CVE-2025-54381

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP...

CVE-2025-54381 BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP...

CVE-2025-54381

CVE-2025-54381 affects BentoML and its file-upload processing in versions 1.4.0–1.4.19. The vulnerability arises in the multipart form data and JSON request handlers, which download user-provided URLs without validating whether they point to internal networks, cloud metadata endpoints, or other r...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: SNYK:PYTHON-BENTOML-11327149...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: GHSA-MRMQ-3Q62-6CC8...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: OSV:GHSA-MRMQ-3Q62-6CC8...

Server-side Request Forgery (SSRF)

Overview bentoml is a BentoML: Build Production-Grade AI Applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the MultipartSerde. ensurefile and JSONSerde.parserequest processes. An attacker can cause the server to make arbitrary HTTP requests to...

GHSA-MRMQ-3Q62-6CC8 BentoML SSRF Vulnerability in File Upload Processing

Description There's an SSRF in the file upload processing system that allows remote attackers to make arbitrary HTTP requests from the server without authentication. The vulnerability exists in the serialization/deserialization handlers for multipart form data and JSON requests, which automatical...

CVE-2025-54381: Server-Side Request Forgery (SSRF)

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP...

PT-2025-31269

Name of the Vulnerable Software and Affected Versions BentoML versions 1.4.0 through 1.4.19 Description BentoML contains a Server-Side Request Forgery SSRF issue in the file upload processing system. This allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests...

BentoML code-related vulnerabilities

BentoML is an open source modeling service library from BentoML Open Source. It is used to build high-performance and scalable artificial intelligence applications using Python. A code issue vulnerability exists in BentoML versions 1.4.0 through 1.4.19 that stems from the file upload processing...

BentoML 1.x < 1.4.8 Arbitrary Code Execution

The version of the BentoML library installed on the remote host has an arbitrary code execution vulnerability. BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner serve...

📄 BentoML Runner Server Remote Code Execution

There was an insecure deserialization in BentoML's runner server prior to version 1.4.8. By setting specific headers and parameters in the POST request, it is possible to execute unauthorized arbitrary code in the context of the user running the server, which will grant initial access and...

serde.py Component Code Execution

The vulnerability of the serde.py component in the BentoML library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code on the server...

Metasploit Wrap-Up 04/18/2025

Smaller Fetch Payloads This week, a significant enhancement was made to the already awesome fetch payload feature by our very own bwatters-r7. The improvement introduces a new option, PIPEFETCH, which optimizes the process by serving both the payload and the command to be executed simultaneously...

Remote Code Execution (RCE)

BentoML is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of specific headers and parameters in POST requests, which allows remote code execution RCE on the server...

📄 BentoML 1.4.2 Remote Code Execution

A remote code execution vulnerability caused by insecure deserialization has been identified in version 1.4.2 of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. This module requires Metasploit: https://metasploit.com/download Current source:...