CVE-2026-103102: Input Validation
Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this denial-of-service issue?
Pexip Infinity deployments before version 41.0 are affected when gateway calls can be accessed from a WebRTC or API client. The issue can be triggered remotely and does not require prior privileges or user interaction.
What does an attacker need to do to exploit the issue?
The attacker needs access to a gateway call through a WebRTC client or API client. The vulnerability is in signaling input validation and can cause the software to abort, resulting in denial of service.
What is the remediation?
Upgrade Pexip Infinity to version 41.0 or later. The provided information does not identify a configuration workaround for systems that cannot be upgraded immediately.