CyberRota Analysis
AI-GeneratedPexip Infinity versions prior to 38.2 and 39.0 through 40.0 are vulnerable due to improper input validation in an internal service, enabling local attackers to escalate privileges to root. Successful exploitation necessitates prior local access or the ability to execute arbitrary code on the node. Organizations using these versions should prioritize patching to mitigate the risk of privilege escalation attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by either achieving remote code execution via some other vulnerability or having administrative access to the operating system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)