Threat database

CVE-2025-49652 is a critical vulnerability in Lablup's BackendAI where the registration feature lacks authentication controls. This flaw allows any arbitrary user to create accounts and gain access to private data, even if registration is supposed to be disabled. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.