Privilege Escalation Vulnerability in Pexip Infinity by Pexip

CVE-2026-103106

What is CVE-2026-103106?

Pexip Infinity software versions up to 38.2 and specific versions 39.0, 39.1, and 40.0 are impacted by a flaw in internal service input validation that facilitates privilege escalation. Attackers with local access can exploit this vulnerability if they have already gained the ability to execute arbitrary code on a node. This can occur either through previous exploitation of another vulnerability leading to remote code execution or by having administrative access to the operating system.

References