Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · BentoML

CVE-2024-9070: BentoML deserialization vulnerability

criticalCVSS 3.0 9.8GHSA-9g44-gwvm-hc44

A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.

Published Mar 20, 2025 · Updated Mar 21, 2025

Affected packages

bentoml

Ecosystem
PyPI
Affected
<= 1.4.5
Fixed in
No patched version yet
Check
pip show bentoml

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More BentoML vulnerabilities

All BentoML entries