Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-11915

HTTP Desynchronisation in Vertex AI for certain third-party models

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GoogleCloud

Description

Connection desynchronization between an HTTP proxy and the model backend. The fixes were rolled out for all proxies in front of impacted models by 2025-09-28. Users do not need to take any action.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google Cloud Vertex AI: Partner Models for MaaS

Default version status: unaffected

  • 0 to < 2025-09-26affected

Google Cloud Vertex AI: Open Models for MaaS

Default version status: unaffected

  • 0 to < 2025-09-28affected

Google Cloud Vertex AI: Self-Deployed Models

Default version status: unaffected

  • 0 to < 2025-09-28affected

References