CVE-2025-49652
CRITICAL9.8CVSS v3
—CVSS v2
0.23%
EPSS (exploit probability)
CWE-306CWE
Description
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.