CVE-2025-49652 – Lablup BackendAI Missing Authentication Vulnerability

CVE ID : CVE-2025-49652

Published : June 9, 2025, 6:15 p.m. | 44 minutes ago

Description : Missing Authentication in the registration feature of Lablup’s BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…