Medium severity · published Jul 1, 2025
CVE-2025-6920
Ai-inference-server: authentication bypass via unprotected inference endpoint in api
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server. All /v1/* endpoints are expected to enforce API key validation. However, the POST /invocations endpoint failed to do so, resulting in an authentication bypass. This vulnerability allows unauthorized users to access the same inference features available on protected endpoints, potentially exposing sensitive functionality or allowing unintended access to backend resources.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat AI Inference Server · Red Hat
All versions, or not specified · source: vendor
AI
AI Inference Server · Redhat
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6920
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6920
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-6920
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2375522
More from Red Hat AI Inference Server
6.5
CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
9.8
CVE-2026-49121
AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization
9.8
CVE-2026-39892
cryptography has a buffer overflow if non-contiguous buffers were passed to APIs
9.8
CVE-2026-25960
SSRF Protection Bypass in vLLM
9.8
CVE-2025-69872
DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default
