CVE-2025-66378 | THREATINT

Description

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node.

PUBLISHED Reserved 2025-11-28 | Published 2025-12-25 | Updated 2025-12-25 | Assigner mitre

MEDIUM: 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-863 Incorrect Authorization

Product status

Default status

unaffected

38.0 (custom) before 39.0

affected

References

docs.pexip.com/admin/security_bulletins.htm

cve.org (CVE-2025-66378)

nvd.nist.gov (CVE-2025-66378)

Download JSON