CVE-2025-45424

Impact

Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/honysyang/Xinference/blob/main/Xinference_Web/Xinference_Web_EN.docx
• https://github.com/honysyang/Xinference/tree/main/Xinference_Web