← CVE Intelligence

CVE-2025-11915

HTTP Desynchronisation in Vertex AI for certain third-party models PUBLISHED

Description (CNA)

Connection desynchronization between an HTTP proxy and the model backend. The fixes were rolled out for all proxies in front of impacted models by 2025-09-28. Users do not need to take any action.

Affected (CNA)

Vendor / productVersions
Google Cloud / Vertex AI: Partner Models for MaaSaffected 0 before 2025-09-26
Google Cloud / Vertex AI: Open Models for MaaSaffected 0 before 2025-09-28
Google Cloud / Vertex AI: Self-Deployed Modelsaffected 0 before 2025-09-28

CWE

CWE-444

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.