CVE-2025-6920

creationtimestamp| type| source ---|---|--- 2025-07-01 17:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsw7ulqr4g23...

CVE-2025-6920

A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server. All /v1/ endpoints are expected to enforce API key validation. However, the POST /invocations endpoint failed to do so, resulting in an authentication bypass. This vulnerability allows...