CVE-2024-2912: 
Python vulnerability analysis and mitigation

An insecure deserialization vulnerability exists in the BentoML framework (CVE-2024-2912), discovered in April 2024. This critical vulnerability allows remote code execution (RCE) by sending specially crafted POST requests to any valid BentoML endpoint. The vulnerability affects BentoML applications and enables attackers to execute arbitrary commands on servers hosting these applications (NVD).

The vulnerability is triggered when a serialized object, crafted to execute OS commands upon deserialization, is sent to any valid BentoML endpoint. The issue has received a CVSS v3.1 base score of 10.0 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. The vulnerability is classified under CWE-1188 (Insecure Default Initialization of Resource) (NVD, Security Online).

The vulnerability poses a significant security risk, allowing attackers to execute arbitrary commands on the server hosting the BentoML application. This could lead to complete system compromise, unauthorized access, and potential control over the affected servers. The impact is particularly concerning for AI/ML applications deployed using the BentoML framework (Security Online).

The vulnerability is highly exploitable as it requires no authentication or user interaction. Attackers can trigger the vulnerability by sending specially crafted POST requests to any valid BentoML endpoint, making it accessible to remote attackers (NVD).

A patch has been released to address this vulnerability. The fix involves disallowing media types other than JSON for HTTP clients and implementing additional security checks on the server side. Organizations using BentoML should update to the patched version as soon as possible (BentoML Commit).