bentoml records
13 published records for vendor bentoml.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 2 · 15.4%
- Pre-auth RCE
- 6
- With a fix record
- 92.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-502 Deserialization of Untrusted Data2
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
- CWE-1188 Initialization of a Resource with an Insecure Default1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2025-32375Weaponized | Insecure Deserialization leads to RCE in BentoML's runner serverbentoml · bentoml · CWE-502 | Critical9.8 | — | 52.4% | Apr 9, 2025 |
60This week | CVE-2025-27520Weaponized | BentoML Allows Remote Code Execution (RCE) via Insecure Deserializationbentoml · bentoml · CWE-502 | Critical9.8 | — | 40.6% | Apr 4, 2025 |
43Plan | CVE-2025-54381Proof of concept | BentoML is Vulnerable to an SSRF Attack Through File Upload Processingbentoml · bentoml · CWE-918 | Critical9.9 | — | 13.1% | Jul 29, 2025 |
40Plan | CVE-2024-2912No exploit | Insecure Deserialization Leading to RCE in bentoml/bentomlbentoml · bentoml/bentoml · CWE-1188 | Critical10.0 | — | 1.5% | Apr 15, 2024 |
38Monitor | CVE-2026-35044No exploit | BentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generationbentoml · bentoml · CWE-1336 | Critical9.6 | — | 0.3% | Apr 6, 2026 |
35Monitor | CVE-2026-44346No exploit | BentoML: Dockerfile command injection via envs[*].name in bentofile.yamlbentoml · bentoml · CWE-78 | High8.8 | — | 0.3% | May 27, 2026 |
35Monitor | CVE-2026-44345No exploit | BentoML: Dockerfile command injection via docker.base_imagebentoml · bentoml · CWE-78 | High8.8 | — | 0.3% | May 27, 2026 |
34Monitor | CVE-2026-27905No exploit | BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extractionbentoml · bentoml · CWE-59 | High8.6 | — | 0.2% | Mar 3, 2026 |
31Monitor | CVE-2026-35043No exploit | BentoML: command injection in cloud deployment setup script (deployment.py)bentoml · bentoml · CWE-78 | High7.8 | — | 0.3% | Apr 6, 2026 |
31Monitor | CVE-2026-33744No exploit | BentoML has Dockerfile Command Injection via system_packages in bentofile.yamlbentoml · bentoml · CWE-94 | High7.8 | — | 0.2% | Mar 27, 2026 |
26Monitor | CVE-2026-24123No exploit | BentoML has a Path Traversal via Bentofile Configurationbentoml · bentoml · CWE-22 | Medium6.5 | — | 0.4% | Jan 26, 2026 |
22Monitor | CVE-2026-40610No exploit | BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build contextbentoml · bentoml · CWE-59 | Medium5.5 | — | 0.2% | May 22, 2026 |
8Monitor | CVE-2026-15035No exploit | bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injectionbentoml · openllm · CWE-74 | Low1.9 | — | 2.2% | Jul 8, 2026 |
- CVE-2025-3237560This week
Insecure Deserialization leads to RCE in BentoML's runner server
CriticalCVSS 9.8WeaponizedEPSS 52%bentoml · bentomlApr 9, 2025
- CVE-2025-2752060This week
BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
CriticalCVSS 9.8WeaponizedEPSS 40%bentoml · bentomlApr 4, 2025
- CVE-2025-5438143Plan
BentoML is Vulnerable to an SSRF Attack Through File Upload Processing
CriticalCVSS 9.9Proof of conceptEPSS 13%bentoml · bentomlJul 29, 2025
- CVE-2024-291240Plan
Insecure Deserialization Leading to RCE in bentoml/bentoml
CriticalCVSS 10.0No exploitEPSS 1%bentoml · bentoml/bentomlApr 15, 2024
- CVE-2026-3504438Monitor
BentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generation
CriticalCVSS 9.6No exploitEPSS 0%bentoml · bentomlApr 6, 2026
- CVE-2026-4434635Monitor
BentoML: Dockerfile command injection via envs[*].name in bentofile.yaml
HighCVSS 8.8No exploitEPSS 0%bentoml · bentomlMay 27, 2026
- CVE-2026-4434535Monitor
BentoML: Dockerfile command injection via docker.base_image
HighCVSS 8.8No exploitEPSS 0%bentoml · bentomlMay 27, 2026
- CVE-2026-2790534Monitor
BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction
HighCVSS 8.6No exploitEPSS 0%bentoml · bentomlMar 3, 2026
- CVE-2026-3504331Monitor
BentoML: command injection in cloud deployment setup script (deployment.py)
HighCVSS 7.8No exploitEPSS 0%bentoml · bentomlApr 6, 2026
- CVE-2026-3374431Monitor
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
HighCVSS 7.8No exploitEPSS 0%bentoml · bentomlMar 27, 2026
- CVE-2026-2412326Monitor
BentoML has a Path Traversal via Bentofile Configuration
MediumCVSS 6.5No exploitEPSS 0%bentoml · bentomlJan 26, 2026
- CVE-2026-4061022Monitor
BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context
MediumCVSS 5.5No exploitEPSS 0%bentoml · bentomlMay 22, 2026
- CVE-2026-150358Monitor
bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection
LowCVSS 1.9No exploitEPSS 2%bentoml · openllmJul 8, 2026