CVE-2025-27520 PoC — BentoML 代码问题漏洞

Description

ay 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab

介绍

# Day 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab

**This lab reproduces the insecure deserialization class that led to CVE-2025-27520.**  
It is intentionally vulnerable for educational purposes. Run locally in Docker only.

## Quickstart

Build and run:

```bash
docker build -t day09-bentoml-lab .
docker run --rm -d -p 8080:8080 --name day09 day09-bentoml-lab
```

文件快照

备注