BackendAI vulnerabilities

2 known vulnerabilities in BackendAI from Lablup. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  BackendAI: Missing Authentication for Critical Functionality

  CVE-2025-49652Jun 9, 2025Lablup

  Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.

• 8.1 High severity

  BackendAI: Missing Authorization

  CVE-2025-49651Jun 9, 2025Lablup

  Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI.