Back to Database
Status published
Medium
CVE-2025-66378
Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access...
Vulnerability Description
Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66378
Credits & Attribution
No credits recorded in the NVD database.
More from Pexip
View All →CVE-2025-66443
Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations...
High
7.5
CVE-2025-66379
Pexip Infinity before 39.0 has Improper Input Validation in the...
High
7.5
CVE-2025-66377
Pexip Infinity before 39.0 has Missing Authentication for a Critical...
High
7.5
CVE-2025-59683
Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access...
High
8.2
CVE-2025-49088
Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations...
Medium
5.9
Affected Vendor
Pexip
View all reports →Affected Software
Infinity
Vulnerable Versions:
38.0
Timeline
Official Publish:
December 25th, 2025
Last Modified:
December 26th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H