
ay 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab
This lab reproduces the insecure deserialization class that led to CVE-2025-27520.
It is intentionally vulnerable for educational purposes. Run locally in Docker only.
Build and run:
docker build -t day09-bentoml-lab .
docker run --rm -d -p 8080:8080 --name day09 day09-bentoml-lab