{"data":{"id":"6b460a4c-ca0d-4fc7-8148-4a1781dfb20c","title":"CVE-2026-78205: BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link","summary":"BentoML versions 1.4.19 through 1.4.39 have a security flaw where the safeguard function (make_safe_connect) that blocks outbound connections to internal networks fails to block CGNAT addresses (100.64.0.0/10, which are shared IP addresses used by internet providers). An attacker can exploit this by sending specially crafted file uploads or JSON requests to trick the server into making requests to internal hosts, a vulnerability called SSRF (server-side request forgery, where a server is tricked into making requests to systems it shouldn't access). This vulnerability is an incomplete fix for a previous security issue.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78205","publishedAt":"2026-08-24T01:16:57.823Z","cveId":"CVE-2026-78205","cweIds":["CWE-918"],"cvssScore":"5.8","cvssSeverity":"medium","severity":"medium","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["BentoML"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-24T01:16:57.823Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}