PT-2025-53391 · Pexip · Pexip Infinity

Published 2025-12-25 · Updated 2025-12-25 · CVE-2025-49088

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions 32.0 through 37.1

Description Pexip Infinity, in specific configurations of OTJ (One Touch Join) for Teams SIP Guest Join, exhibits improper input validation within the OTJ service. This flaw allows a remote attacker to cause a software abort by sending a specially crafted calendar invite, resulting in a denial of service.

Recommendations Update to Pexip Infinity version 37.2 or later.

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2025-49088

Affected Products

Pexip Infinity

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-49088 · Security Note
• https://docs.pexip.com/admin/security_bulletins.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-49088 · Vendor Advisory
• https://t.me/cveNotify/146819 · Telegram Post
• https://t.me/CVEtracker/40650 · Telegram Post