Skip to content
6.9 Medium

CVE-2025-11915 Connection desynchronization between an HTTP proxy and the model backend

Description

Connection desynchronization between an HTTP proxy and the model backend. The fixes were rolled out for all proxies in front of impacted models by 2025-09-28. Users do not need to take any action.

Affected products and versions

Product Affected versions Fixed in
Vertex AI: Partner Models for MaaS 2025 earliest → < 2025-09-26 2025-09-26
Vertex AI: Open Models for MaaS 2025 earliest → < 2025-09-28 2025-09-28
Vertex AI: Self-Deployed Models 2025 earliest → < 2025-09-28 2025-09-28

References

Timeline

  1. Published
  2. Last modified
Track this CVE