BentoML (file upload): SSRF in the file-upload path

CVE-2025-54381AI/ML frameworks & servingcurated

Impact

SSRF in the file-upload path

Who can reach it

Authenticated or unauthenticated request depending on deployment

What to do

Upgrade to 1.4.19+

References

https://nvd.nist.gov/vuln/detail/CVE-2025-54381

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.