CVE-2025-11915
Last modified
CVE-2025-11915 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. Connection desynchronization between an HTTP proxy and the model backend. The fixes were rolled out for all proxies in front of impacted models by 2025-09-28. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
Connection desynchronization between an HTTP proxy and the model backend. The fixes were rolled out for all proxies in front of impacted models by 2025-09-28. Users do not need to take any action.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-11915?
How severe is CVE-2025-11915?
How do I fix CVE-2025-11915?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-1191A vulnerability was found in SourceCodester Multi Restaurant…8.8
- CVE-2025-11910A security vulnerability has been detected in Shenzhen Ruimi…8.8
- CVE-2025-11911A vulnerability was detected in Shenzhen Ruiming Technology …8.8
- CVE-2025-11912A flaw has been found in Shenzhen Ruiming Technology Streama…8.8
- CVE-2025-11913A vulnerability has been found in Shenzhen Ruiming Technolog…6.5
- CVE-2025-11914A vulnerability was found in Shenzhen Ruiming Technology Str…7.5
- CVE-2025-11917The WPeMatico RSS Feed Fetcher plugin for WordPress is vulne…6.4
- CVE-2025-11918Rockwell Automation Arena® suffers from a stack-based buffer…7.3
- CVE-2025-11919The default JVM can access files and directories under `/tmp…9.6
- CVE-2025-1192A vulnerability was found in SourceCodester Multi Restaurant…8.8
- CVE-2025-11920The WPCOM Member plugin for WordPress is vulnerable to Local…8.8
- CVE-2025-11921iStats contains an insecure XPC service that allows local, u…8.5
Are you affected by CVE-2025-11915?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST