CVE-2026-78205: BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link
Summary
BentoML versions 1.4.19 through 1.4.39 have a security flaw where the safeguard function (make_safe_connect) that blocks outbound connections to internal networks fails to block CGNAT addresses (100.64.0.0/10, which are shared IP addresses used by internet providers). An attacker can exploit this by sending specially crafted file uploads or JSON requests to trick the server into making requests to internal hosts, a vulnerability called SSRF (server-side request forgery, where a server is tricked into making requests to systems it shouldn't access). This vulnerability is an incomplete fix for a previous security issue.
Vulnerability Details
5.8(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
network
low
none
none
August 23, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-78205
First tracked: August 24, 2026 at 02:08 AM
Classified by LLM (prompt v3) · confidence: 92%