Live › vulnerability › CVE-2024-2912
Go to dashboardBentoML, a Python framework for serving machine learning models, deserializes attacker-supplied objects in requests sent to any valid endpoint. A crafted serialized object runs operating system commands on the server when it is deserialized.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 15:18 UTC, 0h before NVD. All times on this page are UTC.
Any service built on BentoML before 1.2.5 is exposed, because the flaw sits in request handling for every endpoint rather than in an optional feature. Teams running BentoML model servers on machines reachable from the network should treat them as at risk. Teams not running BentoML, or running a fixed version, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| bentoml | pypi | < 1.2.5 | 1.2.5 |
pip show bentoml and check whether the version is below 1.2.5bentoml pinned below 1.2.5bentoml package to 1.2.5 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution (RCE) by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is triggered when a serialized object, crafted to execute OS commands upon deserialization, is sent to any valid BentoML endpoint. This issue poses a significant security risk, enabling attackers to compromise the server and potentially gain unauthorized access or control.
This page as .md · .json · in your agent: get_signal("CVE-2024-2912")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.