https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:51:50.596004+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-9070 CVE-2024-9070 — Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml 2026-10-08T12:51:50.612537+00:00

Affected: bentoml/bentoml

A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.