SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-78205

MEDIUM · CVSS 5.8 EPSS 0.30% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-24 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

BentoML versions 1.4.19 through 1.4.39 are vulnerable due to an insufficient safeguard in the outbound connection mechanism, allowing unauthenticated attackers to exploit Server-Side Request Forgery (SSRF) by sending URLs that target the RFC 6598 shared address space (100.64.0.0/10). This vulnerability could enable attackers to make unauthorized outbound requests to internal resources, potentially leading to data exposure or further network compromise. Organizations utilizing affected versions of BentoML should prioritize remediation to mitigate the risk of SSRF attacks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-78205
Severity
MEDIUM
CVSS
5.8
EPSS
0.30%

Original NVD Description

BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space (100.64.0.0/10, CGNAT). In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointing to that range via multipart file handling (MultipartSerde.ensure_file) or JSON request parsing (JSONSerde.parse_request), causing the server to make outbound requests to internal hosts on CGNAT networks (Server-Side Request Forgery). This is an incomplete fix for CVE-2025-54381.