CVE-2025-49651 Missing Authorization for Interactive Sessions

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI...

CVE-2025-49651 Missing Authorization for Interactive Sessions

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI...

CVE-2025-49651

CVE-2025-49651 concerns Lablup BackendAI with Missing Authorization, enabling takeover of all active sessions and access/alteration of data within those sessions. The description indicates the vulnerability exists in all current BackendAI versions. Connected documents corroborate the issue but do...

Lablup BackendAI 访问控制错误漏洞

Lablup BackendAI is a machine learning platform from South Korean company Lablup. Lablup BackendAI suffers from an access control error vulnerability that stems from a lack of authentication in the registration function, which could allow an arbitrary user to create an account and access private...

PT-2025-24548

Name of the Vulnerable Software and Affected Versions Lablup's BackendAI affected versions not specified Description The issue allows attackers to expose sensitive data in active sessions, enabling them to retrieve credentials for users on the management platform. Recommendations At the moment,...

PT-2025-24547

Name of the Vulnerable Software and Affected Versions Lablup's BackendAI affected versions not specified Description The issue concerns a missing authentication mechanism in the registration feature, allowing arbitrary users to create accounts that can access private data, even when registration ...

Lablup BackendAI 安全漏洞

Lablup BackendAI is a machine learning platform from Lablup Korea. A security vulnerability exists in Lablup BackendAI that stems from the exposure of sensitive data in active sessions, which could lead to an attacker gaining access to management platform user credentials...

Lablup BackendAI 安全漏洞

Lablup BackendAI is a machine learning platform from Lablup Korea. A security vulnerability exists in Lablup BackendAI that stems from a lack of authorization and could lead to session hijacking and data leakage...