BackendAI vulnerabilities

CVEs whose affected-version data names the BackendAI package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-49652Critical· 9.8PoC

Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.

Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.

▾ AbyssalLablup · BackendAIEPSS 0.43%via NVD

BackendAI vulnerabilities (CVEs) · VulnSea