Advisoriesby IbisBentoMLGHSA-9g44-gwvm-hc44
BentoML deserialization vulnerability
No fix yet
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| bentoml PyPI | <= 1.4.5 | No fix yet |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-502
- Also known as
- CVE-2024-9070, PYSEC-2026-295
- nvd.nist.gov/vuln/detail/CVE-2024-9070
- github.com/bentoml/BentoML
- github.com/bentoml/BentoML/blob/a6f5f937be6ec278f3d4f3bbc6f3c8f9564820d7/src/bentoml/_internal/server/runner_app.py#L297
- github.com/bentoml/BentoML/blob/v1.4.5/src/bentoml/_internal/server/runner_app.py#L301
- github.com/pypa/advisory-database/tree/main/vulns/bentoml/PYSEC-2026-295.yaml
- huntr.com/bounties/7be6fc22-be18-44ee-a001-ac7158d5e1a5
- pypi.org/project/bentoml
More BentoML advisories
All BentoML
BentoML SSRF Vulnerability in File Upload ProcessingCVE-2025-54381fixed in 1.4.19BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure DeserializationCVE-2025-32375fixed in 1.4.8BentoML Allows Remote Code Execution (RCE) via Insecure DeserializationCVE-2025-27520fixed in 1.4.3BentoML Denial of Service (DoS) via Multipart BoundaryCVE-2024-9056no fix yetBentoML Open Redirect vulnerabilityGHSA-564p-rx2q-4c8vno fix yetBentoML vulnerable to Uncontrolled Resource ConsumptionGHSA-hh3j-9m59-p8vcno fix yet