CVE-2026-103105

Pexip / Infinity PUBLISHED

Description (CNA)

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a Pexip Infinity installation to execute arbitrary code as an unprivileged user on another Pexip Infinity node.

Affected (CNA)

Vendor / product	Versions
Pexip / Infinity	affected 0 before 38.2.0; affected 39.0.0; affected 39.1.0; affected 40.0.0

CWE

CWE-863

References

https://docs.pexip.com/admin/security_bulletins.htm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.