CVE advisoryCRITICAL
CVE-2025-49652
Lablup BackendAI Registration Missing Authentication Allows Unauthorized Account Creation
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical authentication vulnerability in Lablup's BackendAI allows unauthenticated users to create accounts and access private data, even if registration is disabled, potentially exposing sensitive information.