BentoML is a modestly represented machine-learning model serving and deployment platform that has gained prominence in the AI infrastructure landscape, concentrating its vulnerability footprint in a single core product. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit tooling, with the exposure recalling through injection and deserialization weaknesses—OS command injection, code injection, deserialization of untrusted data, and path traversal—that are endemic to a framework accepting and executing model artifacts and user-supplied configurations in a containerized environment. Defenders deploying BentoML should treat its advisories as high-priority given the criticality profile and the attack surface inherent to model serving; live exploitation activity and current severity counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bentoml over time
Signals from CVEs in this vendor scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-32375CRITICAL BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner | Apr 9, 2025 | 9.8 | 69 | NO | YES |
CVE-2025-27520CRITICAL BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserializ | Apr 4, 2025 | 9.8 | 62 | NO | YES |
CVE-2025-54381CRITICAL BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contain | Jul 29, 2025 | 9.9 | 41 | NO | NO |
CVE-2026-44346HIGH BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected | May 27, 2026 | 8.8 | 32 | NO | NO |
CVE-2026-44345HIGH BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/dockerfile/temp | May 27, 2026 | 8.8 | 32 | NO | NO |
CVE-2026-35044CRITICAL BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the Dockerfile generation function generate_containerfil | Apr 6, 2026 | 9.6 | 32 | NO | NO |
CVE-2026-15035HIGH A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name | Jul 8, 2026 | 7.8 | 31 | NO | NO |
CVE-2026-33744HIGH BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.37, the `docker.system_packages` field in `bentofile.yaml` a | Mar 27, 2026 | 7.8 | 27 | NO | NO |
CVE-2026-27905HIGH BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function validates that each | Mar 3, 2026 | 7.8 | 27 | NO | NO |
CVE-2026-40610MEDIUM BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attack | May 22, 2026 | 5.5 | 26 | NO | NO |
Signals from CVEs in this vendor scope (12 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bentoml.
Media articles that mention a CVE ID that affects a product developed by Bentoml — matched by CVE ID, not by vendor name.