CVE-2025-49652
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registra…
Published Jun 9, 2025 · updated Oct 14, 2026
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jun 9, 2025 · NIST NVD
Detected
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Oct 14, 2026 · NIST NVD
Updated
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Sources
- CVE.orgVulnerability recordCVE-2025-49652
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-49652
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2025-49652
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
nvd.nist.gov