CVE-2025-49652

Publication date

2025-06-09 17:26:20

Family

HiddenLayer

State

PUBLISHED

Description

Missing Authentication in the registration feature of Lablups BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.