Skip to content
OpenAdvisories
High · 8.8 CVE-2025-43515 EUVD-2025-175367GHSA-qj63-p8p9-26g8

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on t…

Published Nov 13, 2025 · Updated Apr 2, 2026 · Assigned by apple

Description

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Apple Compressor < 4.11.1 4.11.1

References