CyberRota Analysis
AI-GeneratedBentoML versions 1.4.19 through 1.4.39 are vulnerable due to an insufficient safeguard in the outbound connection mechanism, allowing unauthenticated attackers to exploit Server-Side Request Forgery (SSRF) by sending URLs that target the RFC 6598 shared address space (100.64.0.0/10). This vulnerability could enable attackers to make unauthorized outbound requests to internal resources, potentially leading to data exposure or further network compromise. Organizations utilizing affected versions of BentoML should prioritize remediation to mitigate the risk of SSRF attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space (100.64.0.0/10, CGNAT). In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointing to that range via multipart file handling (MultipartSerde.ensure_file) or JSON request parsing (JSONSerde.parse_request), causing the server to make outbound requests to internal hosts on CGNAT networks (Server-Side Request Forgery). This is an incomplete fix for CVE-2025-54381.