Back to Database
Status published
High
CVE-2025-66377
Pexip Infinity before 39.0 has Missing Authentication for a Critical...
Vulnerability Description
Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node within a Pexip Infinity installation) to impact the operation of other nodes within the installation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66377
Credits & Attribution
No credits recorded in the NVD database.
More from Pexip
View All →CVE-2025-66443
Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations...
High
7.5
CVE-2025-66379
Pexip Infinity before 39.0 has Improper Input Validation in the...
High
7.5
CVE-2025-66378
Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access...
Medium
5.9
CVE-2025-59683
Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access...
High
8.2
CVE-2025-49088
Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations...
Medium
5.9
Affected Vendor
Pexip
View all reports →Affected Software
Infinity
Vulnerable Versions:
0
Timeline
Official Publish:
December 25th, 2025
Last Modified:
December 26th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H