CVE-2025-6920 Ai-inference-server: authentication bypass via unprotected inference endpoint in api
Attackers can bypass authentication on the inference endpoint to access protected model features and backend resources without an API key.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6920?
CVE-2025-6920 is a medium-severity authentication bypass vulnerability in Red Hat AI Inference Server, published on 1 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server. All /v1/* endpoints are expected to enforce API key validation. However, the POST /invocations endpoint failed to do so, resulting in an authentication bypass. This vulnerability allows unauthorized users to access the same inference features available on protected endpoints, potentially exposing sensitive functionality or allowing unintended access to backend resources.
Weakness: CWE-306
Which versions are affected by CVE-2025-6920?
It affects 1 product.
Products include Redhat Ai Inference Server.
How do I fix CVE-2025-6920?
No fix has been published for CVE-2025-6920 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-6920 being exploited?
There is no known exploitation of CVE-2025-6920 in the wild and no public exploit code.
Sources
Also known as GHSA-5qf8-7rm9-wfxp.