CVE-2025-49652
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registra…
Published Jun 9, 2025 · updated Oct 14, 2026
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Timeline
Detection, updates, and resolution for this record.
Jun 9, 2025 · NIST NVD
Detected
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Oct 14, 2026 · NIST NVD
Updated
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Sources
- CVE.orgCVE-2025-49652
Official CVE identifier
cve.org - NIST NVDCVE-2025-49652
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
nvd.nist.gov