The client API authentication mechanism in Pexip Infinity prior to 10 allows remote malicious users to gain privileges via a crafted request.
pexip pexip infinity