バナーによると、リモートホストで実行中の BentoML のバージョンは、1.3.4 < 1.4.3 です。このため、データフロー分析経由で、安全でない逆シリアル化の脆弱性の影響を受けます。

スキャナーはこれらの問題のテストを行っておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

根據其標題，遠端主機上執行的 BentoML 版本為低於 1.4.3 的 1.3.4。因此，它受到因資料流分析引起的不安全的還原序列化弱點影響

請注意，掃描器程式並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

根据其标题，远程主机上运行的 BentoML 版本为低于 1.4.3 的 1.3.4。因此，它受到因数据流分析引起的不安全的反序列化漏洞影响

请注意，扫描程序并未测试这些问题，而是仅依据应用程序自我报告的版本号进行判断。

According to its banner, the version of BentoML running on the remote host is 1.3.4 < 1.4.3. It is, therefore, affected by an Insecure Deserialization vulnerability through data flow analysis

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - BentoML is a Python library for building online serving systems optimized for AI apps and model inference.
    A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the
    latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the
    server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.
    (CVE-2025-27520)

ID	名稱	產品	系列	已發布	已更新	嚴重性
114934	BentoML 1.3.4 < 1.4.3 の安全でない逆シリアル化	Web App Scanning	Artificial Intelligence	2025/8/5	2025/8/5	critical
114934	BentoML 1.3.4 < 1.4.3 不安全的還原序列化	Web App Scanning	Artificial Intelligence	2025/8/5	2025/8/5	critical
114934	BentoML 1.3.4 < 1.4.3 不安全的反序列化	Web App Scanning	Artificial Intelligence	2025/8/5	2025/8/5	critical
114934	BentoML 1.3.4 < 1.4.3 Insecure Deserialization	Web App Scanning	Artificial Intelligence	2025/8/5	2025/8/5	critical
424767	SCA: security update for bentoml (GHSA-33xw-247w-6hmc)	Tenable Cloud Security	SCA Checks	2025/4/4	2026/7/2	critical
424767	SCA: security update for bentoml (GHSA-33xw-247w-6hmc)	Tenable Self-Hosted Container Security	SCA Checks	2025/4/4	2026/7/2	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical