AI agent vulnerability · BentoML

GHSA-hh3j-9m59-p8vc: BentoML vulnerable to Uncontrolled Resource Consumption

highCVSS 3.0 7.5

In bentoml/bentoml version 1.3.9, the /login endpoint of the newly integrated Gradio app is vulnerable to a Denial of Service (DoS) attack. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable.

Published Mar 20, 2025 · Updated Apr 15, 2025

Affected packages

bentoml

Ecosystem: PyPI
Affected: <= 1.3.9
Fixed in: No patched version yet
Check: pip show bentoml

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

In bentoml/bentoml version 1.3.9, the /login endpoint of the newly integrated Gradio app is vulnerable to a Denial of Service (DoS) attack. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More BentoML vulnerabilities

All BentoML entries