CVE-2025-32375 PoC — Insecure Deserialization leads to RCE in BentoML's runner server

Source

Associated Vulnerability

Description

This repository includes everything needed to run a PoC exploit for CVE-2025-32375 in a Docker environment. It runs the latest vulnerable version of BentoML (1.4.7).

Readme

# Setup for the vulnerable version.

Start the vulnerable container:
```sh
docker compose up
```

Create a listener (e.g. ncat):
```sh
ncat -klnv 1337
```

Run the exploit:
```sh
python3 exploit.py
```

You should receive an HTTP request in the ncat window with the contents of the OS command (`id` by default) if everything worked as expected.

# Credits
+ Vulnerability found by [SeaW1nd](https://twitter.com/SeaW1nd1405)
+ Based on the testing setup by [VickyTheViking](https://github.com/VickyTheViking)

File Snapshot

 [4.0K]  /data/pocs/de6595faecb8ec7ecfb23e4633a6b91845279c5d
├── [ 109]  docker-compose.yml
├── [ 408]  Dockerfile
├── [ 534]  exploit.py
├── [ 508]  README.md
└── [4.0K]  workdir
    ├── [ 172]  bentofile.yaml
    ├── [ 246]  create.py
    └── [ 460]  service.py

1 directory, 7 files

Remarks