CRITICALCVSS 9.8EPSS 0.9%

CVE-2024-9070

BentoML deserialization vulnerability

Published: 2025-03-20
Modified: 2026-10-27
EPSS percentile: 61%
Aliases: GHSA-9g44-gwvm-hc44
Sources: github-advisory

Summary

A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
PyPI	bentoml	—	—

Remediation: No patched version is listed by GitHub.

References

https://github.com/advisories/GHSA-9g44-gwvm-hc44

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.