Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-49652

Improper access control allows arbitrary account creation

Description

Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lablup BackendAI

Default version status: unaffected

  • * to < 25.15.6affected

References