CVE-2025-32375

Published Apr 9, 2025

Last updated 4 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-32375 is a critical remote code execution vulnerability affecting BentoML, a Python library used for building AI-powered online serving systems. Disclosed on April 9, 2025, the vulnerability exists in versions prior to 1.4.8 within BentoML's runner server component. It stems from an insecure deserialization flaw that allows attackers to execute arbitrary code on the server. By manipulating specific headers and parameters in a POST request, an attacker can trigger unsafe deserialization of pickle data. This grants them initial access and enables information disclosure, potentially leading to complete system compromise, including the execution of arbitrary OS commands and remote shell access. The vulnerability is fixed in BentoML version 1.4.8.

Description: BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized arbitrary code on the server, which will grant the attackers to have the initial access and information disclosure on the server. This vulnerability is fixed in 1.4.8.
Source: security-advisories@github.com
NVD status: Analyzed
Products: bentoml

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security-advisories@github.com: CWE-502

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bentoml:bentoml:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA900784-6BEB-4584-A356-13411ECDDF9B",
            "versionEndExcluding": "1.4.8",
            "versionStartIncluding": "1.0.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.