PT-2025-53393 · Pexip · Pexip Infinity

Published 2025-12-25 · Updated 2026-01-05 · CVE-2025-66378

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions 38.0 and 38.1 through 38.1

Description The software contains insufficient access control within its RTMP implementation. This allows an attacker to disconnect RTMP streams as they pass through a Proxy Node.

Recommendations Update to version 39.0 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-66378

Affected Products

Pexip Infinity

References · 7

• https://osv.dev/vulnerability/CVE-2025-66378 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66378 · Security Note
• https://docs.pexip.com/admin/security_bulletins.htm · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2004066663465930906 · Twitter Post
• https://t.me/cveNotify/147749 · Telegram Post
• https://t.me/CVEtracker/40654 · Telegram Post
• https://t.me/cveNotify/146822 · Telegram Post