CVE-2025-49652 | BDVDB-2026-281739 Detail
LablupBackendAI
Description#
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Impact#
CAPEC-115 Authentication Bypass
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.