Remote Code Execution (RCE)

BentoML is vulnerable to Remote Code Execution RCE. The vulnerability is due to insecure deserialization due to an unsafe code segment in serde.py that allows arbitrary code execution by unauthenticated users...

BentoML Vulnerability Allows Remote Code Execution on AI Servers

TL;DR: A critical deserialization vulnerability CVSS 9.8 - CVE-2025-27520 in BentoML v1.3.8–1.4.2 lets attackers execute remote code without…...

CVE-2025-32375

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

PYSEC-2025-32

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

ai-dynamo (0.1.0), bentoutils (>=1.0.1, <=1.1.0) +5 more potentially affected by CVE-2025-32375 via bentoml (>=1.0.8, <=1.4.7)

bentoml PYPI version =1.0.8, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.23 - raptor-labsdk 0.3.2 Source cves: CVE-2025-32375 Source advisory: OSV:PYSEC-2025-32...

CVE-2025-32375

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

CVE-2025-32375

Summary: CVE-2025-32375 affects BentoML prior to version 1.4.8, due to an insecure deserialization in BentoML’s runner server. The vulnerability allows an attacker to craft POST requests with specific headers/parameters to execute arbitrary code on the server, giving initial access and informatio...

CVE-2025-32375 Insecure Deserialization leads to RCE in BentoML's runner server

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

CVE-2025-32375 Insecure Deserialization leads to RCE in BentoML's runner server

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

CVE-2025-32375 Insecure Deserialization leads to RCE in BentoML's runner server

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

CVE-2025-32375

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

ai-dynamo (0.1.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2025-32375 via bentoml (>=1.0.0a7, <=1.4.7)

bentoml PYPI version =1.0.0a7, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.23 - raptor-labsdk 0.3.2 Source cves: CVE-2025-32375 Source advisory: MEND:CVE-2025-32375...

GHSA-7V4R-C989-XH26 BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Summary There was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized arbitrary code on the server, which will grant the attackers to have the initial access and information disclosure o...

BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Summary There was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized arbitrary code on the server, which will grant the attackers to have the initial access and information disclosure o...

Deserialization of Untrusted Data

Overview bentoml is a BentoML: Build Production-Grade AI Applications Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the runner server, which is accessible via the id parameter in a POST request. An attacker can execute arbitrary code by injecting command...

ai-dynamo (0.1.0), bentoutils (>=1.0.1, <=1.1.0) +5 more potentially affected by CVE-2025-32375 via bentoml (>=1.0.8, <=1.4.7)

bentoml PYPI version =1.0.8, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.23 - raptor-labsdk 0.3.2 Source cves: CVE-2025-32375 Source advisory: SNYK:PYTHON-BENTOML-9679274...

ai-dynamo (0.1.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2025-32375 via bentoml (>=1.0.0a7, <=1.4.7)

bentoml PYPI version =1.0.0a7, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.23 - raptor-labsdk 0.3.2 Source cves: CVE-2025-32375 Source advisory: GHSA-7V4R-C989-XH26...

ai-dynamo (0.1.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2025-32375 via bentoml (>=1.0.0a7, <=1.4.7)

bentoml PYPI version =1.0.0a7, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.23 - raptor-labsdk 0.3.2 Source cves: CVE-2025-32375 Source advisory: OSV:GHSA-7V4R-C989-XH26...

PT-2025-15707

Name of the Vulnerable Software and Affected Versions BentoML versions 1.0.0a1 through 1.4.7 Description The issue is related to an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...

CVE-2025-32375: Deserialization of Untrusted Data

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized...