Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · BentoML

GHSA-564p-rx2q-4c8v: BentoML Open Redirect vulnerability

mediumCVSS 3.0 6.1

An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.

Published Mar 20, 2025 · Updated Apr 15, 2025

Affected packages

bentoml

Ecosystem
PyPI
Affected
<= 1.3.9
Fixed in
No patched version yet
Check
pip show bentoml

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More BentoML vulnerabilities

All BentoML entries