Description
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| bentoml | BentoML | >= 1.3.4, < 1.4.3 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
BentoML RCE
exploit/linux/http/bentoml_rce_cve_2025_27520
GitHub 3 repositories
-
electricsheep08/CVE-2025-27520 ★ 0 · Jul 24, 2026
exploit for CVE-2025-27520 A Remote Code Execution (RCE) vulnerability caused by insecure deserialization in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbi…
-
Evillm/CVE-2025-27520-PoC ★ 0 · Feb 4, 2026
-
amalpvatayam67/day09-bentoml-deser-lab ★ 0 · Sep 22, 2025
ay 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | bentoml | >= 1.3.4, < 1.4.3 | 1.4.3 | GHSA-33xw-247w-6hmc |