Vulnerability · Published Apr 4, 2025 · Assigned by GitHub_M
CVE-2025-27520BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
Critical 9.8
In plain English
A critical-severity unsafe deserialization in BentoML from bentoml. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 40.6% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | bentoml | 1.4.3 | GHSA-33xw-247w-6hmc |
| PyPI | bentoml | 1.4.3 | PYSEC-2026-294 |
Affected products (as reported)
Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H