BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
75Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.8epss 39%
from disclosure to weapon171 days
Published on NVDApr 4
1st PoC+171d
metasploitApr 4
exploitation probability
39%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
bentoml · BentoMLpublic PoCs found — 2
githubgithub.com/amalpvatayam67/day09-bentoml-deser-lab★ 0githubgithub.com/Evillm/CVE-2025-27520-PoC★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.