Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-49651

Missing Authorization for Interactive Sessions

Description

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lablup BackendAI

Default version status: unaffected

  • *affected

References