repository icon
bentoml / bentoml Project repository

The easiest way to serve AI apps and models - Build Model Inference APIs, Job queues, LLM apps, Multi-model pipelines, and more!

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN27 DAYS

FIX

WITHIN69 DAYS

Unauthenticated Pickle Deserialization RCE in BentoML Runner
clawdbartell-wq
self closed
Patch bypass for CVE-2025-27520 -- BentoML dependency workers accept the binary-...
jaydubya09
self closed
Unauthenticated Pickle Deserialization on Runner RPC Endpoint (RCE)
jd-admrl-ai
self closed
Arbitrary file write via tar/zip slip in bentoml.import_bento and bentoml.models...
piggles420
duplicate
High
Path traversal in `Exportable._from_fs` via unvalidated fsspec `TarFileSystem` /...
snakeyworm
duplicate
High
[BentoML] Pickle Deserialization RCE in Runner Server (args-number Header)
sukhawarring
duplicate
High
SSRF Protection Bypass on Non-uvloop Systems (Windows, Default asyncio)
rook2135
self closed
Remote code execution via pickle deserialization on runner HTTP endpoint — args-...
microwaveovens-yay
duplicate
Critical
Path Traversal via fsspec in bentoml import
pierreolivierbonin
duplicate
High
Critical RCE via unsafe pickle deserialization in unauthenticated runner endpoin...
pulkit7070
duplicate
Critical
Unsafe pickle.loads() in Runner Container and Serde Enables RCE via Crafted Payl...
mom3gool2030
duplicate
None
Unauthenticated RCE via pickle.loads() on HTTP Request Body in BentoML Runner Se...
odysseypro25-project
duplicate
Critical
Unsafe pickle/cloudpickle deserialization in BentoML model loading and runner HT...
etwithin
duplicate
None
BentoML Unsafe Pickle Deserialization in Runner Endpoints — Unauthenticated Remo...
avienma007
duplicate
Critical
BentoML Runner API Unsafe Pickle Deserialization Leading to Remote Code Executio...
avienma007
self closed
Pickle Deserialization RCE on Dependency Service Workers (is_main bypass)
momoponwork1415-lgtm
duplicate
High
Remote Code Execution via Pickle Deserialization on Unauthenticated Runner HTTP...
avienma007
self closed
Pickle RCE on Worker Services Bypassing Main Server Security Check
jeremysommerfeld8910-cpu
duplicate
High
SSRF Filter Bypass via Non-Private Reserved IP Ranges in BentoML
vnykmshr
pending
Symlink Path Traversal in safe_extract_tarfile() — Arbitrary File Write via Mal...
nottiboy137
duplicate
High
Unsafe pickle deserialization on dependency services bypasses is_main guard enab...
sebasfavaron
pending
safe_extract_tarfile Symlink Path Traversal → Arbitrary File Write
iiviel
duplicate
Medium
Arbitrary File Write via Symlink Following in safe_extract_tarfile During Bento/...
phenggeler
duplicate
High
SSRF Protection Bypass via non-uvloop event loop — make_safe_connect() only patc...
iiviel
pending
Arbitrary Command Execution via malicious bento archive — commands/post_commands...
iiviel
pending
BentoML - Insecure JSON Deserialization Vulnerability Report in Header
shybu9
pending
Critical RCE via Unsafe Pickle Deserialization in Runner Server
gnomeman4201
duplicate
Critical
Path traversal, lead to remote code execution
makerdd
pending
Remote Code Execution via Unsafe Pickle Deserialization in BentoML Runner Server...
michaelpierre
duplicate
Critical
The update resulted in the removal of the fix for the deserialization vulnerabil...
coder-sjn
duplicate
Critical
Insecure Deserialization leads to RCE in BentoML's runner server
seaw1nd
self closed
API /summarize interface can cause DOS , which can prevent others from using it...
startr4ck
duplicate
High
Unauthenticated Denial of Service (DoS) via Multipart Boundary in recent integra...
mnqazi
High
•$450•CVE-2024-12759
Open Redirect
mnqazi
Medium
•$75•CVE-2024-12760
Denial of service
oicu0619
duplicate
High
There is a deserialization vulnerability in BentoML's runner server
hexian2001
Critical
•$900•CVE-2024-9070
Denial of Service (DoS) via Multipart Boundary
mnqazi
High
•$450•CVE-2024-9056
CORS and CSRF at /metrics endpoint, revealing the server request log, with endpo...
mnqazi
pending
SSRF in Upload File Request
pruferva
informative
High
RCE By Sending A Single POST Request Via Insecure Deserialization
pinkdraconian
Critical
•$900•CVE-2024-2912
Command execution vulnerability in the bentoml project
bayuncao
not applicable
ReDOS in
lujiefsi
spam
Stored Cross-Site Scripting (XSS) in User Profile Email Notifications
scottie
informative
Medium