Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a...

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a Pexip Infinity installation to execute arbitrary code as an unprivileged user on another Pexip Infinity node.