BentoMLGHSA-9g44-gwvm-hc44
BentoML deserialization vulnerability
Critical9.8CVE-2024-9070 · Published Mar 20, 2025 · updated Jun 29, 2026
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| bentoml PyPI | <= 1.4.5 | No fix yet |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-502
- Also known as
- CVE-2024-9070, PYSEC-2026-295
- nvd.nist.gov/vuln/detail/CVE-2024-9070
- github.com/bentoml/BentoML
- github.com/bentoml/BentoML/blob/a6f5f937be6ec278f3d4f3bbc6f3c8f9564820d7/src/bentoml/_internal/server/runner_app.py#L297
- github.com/bentoml/BentoML/blob/v1.4.5/src/bentoml/_internal/server/runner_app.py#L301
- huntr.com/bounties/7be6fc22-be18-44ee-a001-ac7158d5e1a5
More BentoML advisories
All BentoML| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 292025 | BentoML SSRF Vulnerability in File Upload Processing Critical9.9Jul 29, 2025 | Critical9.9 | 1.4.19 |
| Apr 92025 | BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure DeserializationCritical9.8Apr 9, 2025 | Critical9.8 | 1.4.8 |
| Apr 42025 | BentoML Allows Remote Code Execution (RCE) via Insecure DeserializationCritical9.8Apr 4, 2025 | Critical9.8 | 1.4.3 |
| Mar 202025 | BentoML Denial of Service (DoS) via Multipart BoundaryHigh7.5Mar 20, 2025 | High7.5 | No fix yet |
| Mar 202025 | BentoML Open Redirect vulnerabilityMedium6.1Mar 20, 2025 | Medium6.1 | No fix yet |
| Mar 202025 | BentoML vulnerable to Uncontrolled Resource ConsumptionHigh7.5Mar 20, 2025 | High7.5 | No fix yet |