Live › vulnerability › CVE-2024-9070
Go to dashboardBentoML's runner server deserializes request data when the args-number parameter is greater than 1, so an attacker who sends crafted parameters can execute arbitrary code on the server. The advisory gives a CVSS score of 9.8 and lists the affected range as up to 1.4.5, while the description names versions up to 1.3.4.post1.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 15:18 UTC, 0h before NVD. All times on this page are UTC.
Teams running BentoML model-serving runners on a version at or below 1.4.5 are exposed, and the sources name the runner server as the component. Deployments where the runner server is not reachable from untrusted networks have less exposure. The sources do not say whether the default configuration is vulnerable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| bentoml | pypi | <= 1.4.5 | – |
pip show bentoml and compare the installed version with 1.4.5 and earlier releasesbentoml to a release newer than 1.4.5; the fixed version is unknown from the sources, so confirm it in the GHSA advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2024-9070")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.