Approved changes feed: RSS · Atom
cpe:2.3:a:lablup:backendai:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Lablup (a2db91b8-2861-5691-b7fb-2ac828668829) |
|---|---|
| Product | Backendai (0350f083-db4c-5ff0-8a93-89e39c7dbdcc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-49653 |
vulnerable | 2026-06-08 07:29:13.935236 |
Exposure of sensitive Information allows account takeover
HIGH (8)
Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users on the management platform.
Published: 2025-06-09T17:27:00.603Z
Updated: 2025-06-11T12:12:30.504Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49652 |
vulnerable | 2026-06-08 07:29:13.934968 |
Improper access control allows arbitrary account creation
CRITICAL (9.8)
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Published: 2025-06-09T17:26:20.835Z
Updated: 2026-10-14T16:13:31.206Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49651 |
vulnerable | 2026-06-08 07:29:13.934633 |
Missing Authorization for Interactive Sessions
HIGH (8.1)
Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI.
Published: 2025-06-09T17:25:11.250Z
Updated: 2025-06-11T12:12:00.783Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.