{"cve":"CVE-2025-54381","nvd":{"published":"2025-07-29T23:15:32.947","modified":"2026-06-17T09:39:57.463","status":"Analyzed","description":"BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests. The vulnerability stems from the multipart form data and JSON request handlers, which automatically download files from user-provided URLs without validating whether those URLs point to internal network addresses, cloud metadata endpoints, or other restricted resources. The documentation explicitly promotes this URL-based file upload feature, making it an intended design that exposes all deployed services to SSRF attacks by default. Version 1.4.19 contains a patch for the issue.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L","score":9.9},"cwes":["CWE-918"],"references":["https://github.com/bentoml/BentoML/commit/534c3584621da4ab954bdc3d814cc66b95ae5fb8","https://github.com/bentoml/BentoML/security/advisories/GHSA-mrmq-3q62-6cc8","https://github.com/bentoml/BentoML/security/advisories/GHSA-mrmq-3q62-6cc8"],"products":["bentoml:bentoml"],"source":"nvd","synced_at":"2026-10-19T22:05:46.678065081+00:00"},"epss":{"cve":"CVE-2025-54381","score":0.13177,"percentile":0.96366,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-mrmq-3q62-6cc8","url":"https://osv.dev/vulnerability/GHSA-mrmq-3q62-6cc8","summary":"BentoML SSRF Vulnerability in File Upload Processing  ","modified":"2026-10-27T15:30:03.235527734Z","packages":[{"ecosystem":"PyPI","name":"bentoml","purl":"pkg:pypi/bentoml","ranges":[">=1.4.0 <1.4.19"],"fixed":["1.4.19"]}]},{"id":"PYSEC-2026-297","url":"https://osv.dev/vulnerability/PYSEC-2026-297","summary":"BentoML SSRF Vulnerability in File Upload Processing  ","modified":"2026-07-01T20:22:49.858115Z","packages":[{"ecosystem":"PyPI","name":"bentoml","purl":"pkg:pypi/bentoml","ranges":[">=1.4.0 <1.4.19"],"fixed":["1.4.19"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}