CyberSecBulletin

Lablup vulnerabilities

We track 2 vulnerabilities in Lablup products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2025.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Lablup vulnerabilities

  • 9.8 Critical severity

    BackendAI: Missing Authentication for Critical Functionality

    CVE-2025-49652Lablup

    Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.

  • 8.1 High severity

    BackendAI: Missing Authorization

    CVE-2025-49651Lablup

    Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI.