Skip to content
OpenAdvisories

Vendor

bentoml

18 known vulnerabilities.

Products

BentoML 13 bentoml/bentoml 3 bentoml/openllm 1 OpenLLM 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-54381 Public exploit EPSS 14%

    BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force t…

    bentoml BentoML bentoml PyPI
  • Critical 9.8
    CVE-2025-32375 Public exploit EPSS 52%

    Insecure Deserialization leads to RCE in BentoML's runner server

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is …

    bentoml BentoML bentoml PyPI
  • Critical 9.8
    CVE-2025-27520 Public exploit EPSS 41%

    BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows …

    bentoml BentoML bentoml PyPI