Insufficient Access Control in Pexip Infinity RTMP Implementation

CVE-2025-66378

What is CVE-2025-66378?

The Pexip Infinity platform versions 38.0 and 38.1 lack proper access controls in their Real-Time Messaging Protocol (RTMP) implementation. This vulnerability enables attackers to disconnect RTMP streams that pass through Proxy Nodes, potentially disrupting communication and service continuity. Organizations utilizing these versions are encouraged to upgrade to version 39.0 or later to mitigate security risks associated with this access control issue.

References