Do Son A critical SSRF vulnerability (CVE-2025-54381) in BentoML's file upload handling allows unauthenticated remote attackers to perform internal network reconnaissance and steal cloud metadata credentials from AI applications.
BentoML
Learn about CVE-2025-27520, a security vulnerability in BentoML that allows remote code execution due to insecure deserialization.
CVE-2024-2912 vulnerability lies in the way the software handles data, allowing attackers to run arbitrary code on servers running BentoML