How to fix CVE-2025-45424?

Within 30 days: Identify affected systems running Xinference and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Is Xinference affected by CVE-2025-45424?

Organizations using Xinference should be aware of moderate risk from CVE-2025-45424, a improper access control vulnerability rated CVSS 5.3. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available.

CVE-2025-45424

EUVD-2025-19750 MEDIUM

2025-07-02 [email protected]

Authentication Bypass Xinference

5.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 16, 2026 - 01:55 vuln.today

EUVD ID Assigned

Mar 16, 2026 - 01:55 euvd

EUVD-2025-19750

PoC Detected

Oct 18, 2025 - 01:40 vuln.today

Public exploit code

CVE Published

Jul 02, 2025 - 17:15 nvd

MEDIUM 5.3

DescriptionNVD

Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication.

AnalysisAI

Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication.

Technical ContextAI

This vulnerability is classified as Improper Access Control (CWE-284).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

CVE-2025-45424 vulnerability details – vuln.today

Back

CVE-2025-45424

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code