Is CVE-2026-103105 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103105?

CVE-2026-103105 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-103105

Description

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a Pexip Infinity installation to execute arbitrary code as an unprivileged user on another Pexip Infinity node.