CVE-2026-78205

MEDIUM 5.8

BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space

CVSS Score

5.8

EPSS Score

0.0%

EPSS Percentile

0th

BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space (100.64.0.0/10, CGNAT). In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointing to that range via multipart file handling (MultipartSerde.ensure_file) or JSON request parsing (JSONSerde.parse_request), causing the server to make outbound requests to internal hosts on CGNAT networks (Server-Side Request Forgery). This is an incomplete fix for CVE-2025-54381.

CWE	CWE-918
Vendor	bentoml
Product	bentoml
Published	Aug 24, 2026

Stay Ahead of the Next One

Get instant alerts for bentoml bentoml

Be the first to know when new medium vulnerabilities affecting bentoml bentoml are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

bentoml / BentoML

1.4.19 ≤ 1.4.39

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/bentoml/BentoML/issues/5644 github.com: https://github.com/bentoml/BentoML github.com: https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/utils/uri.py#L89-L96 vulncheck.com: https://www.vulncheck.com/advisories/bentoml-through-server-side-request-forgery-via-unfiltered-rfc-6598-shared-address-space

Credits

George Chen