module

BentoML RCE

Disclosed
Apr 4, 2025

Description

A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in v1.4.2 of BentoML.
It allows any unauthenticated user to execute arbitrary code on the server.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.