CriticalFix available
BackendAI Missing Authentication for Critical Function
Type: advisorySources: OSV
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
- Products
- backend-ai
- Affected versions
- 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.2.0, 1.3.0, 1.4.0, 18.12.0, 19.3.0, 19.3.0a1, 19.9.0, 20.3.0, 20.3.1, 20.9.0, 20.9.0a1.dev0, 21.3.0, 22.3.0
- Fixed versions
- 25.15.6, 25.19.0rc1
- CVEs
- CVE-2025-49652
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 18:44 UTC · Revision 1
Source evidence
BackendAI Missing Authentication for Critical Function
core-osv · Original sourcePublished 9 Jun 2025, 18:32 UTC
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
osv:GHSA-ww28-4m4v-cq4j
backend-ai
Fixed versions: 25.15.6
backend-ai
Fixed versions: 25.19.0rc1
Complete source record
{
"id": "ccd96f158c4fcb1e235c4faf4f729c312dfa630fb59810fe0b9f04f5cd6c7b1a",
"url": "https://osv.dev/vulnerability/GHSA-ww28-4m4v-cq4j",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "BackendAI Missing Authentication for Critical Function",
"summary": "Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.",
"evidence": "osv:GHSA-ww28-4m4v-cq4j",
"products": [
{
"name": {
"value": "backend-ai",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "25.15.6",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "1.0.0",
"evidence": "/affected/0/versions"
},
{
"value": "1.0.1",
"evidence": "/affected/0/versions"
},
{
"value": "1.0.2",
"evidence": "/affected/0/versions"
},
{
"value": "1.1.0",
"evidence": "/affected/0/versions"
},
{
"value": "1.2.0",
"evidence": "/affected/0/versions"
},
{
"value": "1.3.0",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.0",
"evidence": "/affected/0/versions"
},
{
"value": "18.12.0",
"evidence": "/affected/0/versions"
},
{
"value": "19.3.0",
"evidence": "/affected/0/versions"
},
{
"value": "19.3.0a1",
"evidence": "/affected/0/versions"
},
{
"value": "19.9.0",
"evidence": "/affected/0/versions"
},
{
"value": "20.3.0",
"evidence": "/affected/0/versions"
},
{
"value": "20.3.1",
"evidence": "/affected/0/versions"
},
{
"value": "20.9.0",
"evidence": "/affected/0/versions"
},
{
"value": "20.9.0a1.dev0",
"evidence": "/affected/0/versions"
},
{
"value": "21.3.0",
"evidence": "/affected/0/versions"
},
{
"value": "22.3.0",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "backend-ai",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "25.19.0rc1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "GHSA-ww28-4m4v-cq4j",
"aliases": [
"CVE-2025-49652",
"GHSA-ww28-4m4v-cq4j",
"PYSEC-2026-290"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "25.15.6"
}
]
}
],
"package": {
"name": "backend-ai",
"purl": "pkg:pypi/backend-ai",
"ecosystem": "PyPI"
},
"versions": [
"1.0.0",
"1.0.1",
"1.0.2",
"1.1.0",
"1.2.0",
"1.3.0",
"1.4.0",
"18.12.0",
"19.3.0",
"19.3.0a1",
"19.9.0",
"20.3.0",
"20.3.1",
"20.9.0",
"20.9.0a1.dev0",
"21.3.0",
"22.3.0"
],
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-ww28-4m4v-cq4j/GHSA-ww28-4m4v-cq4j.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "25.16.0rc1"
},
{
"fixed": "25.19.0rc1"
}
]
}
],
"package": {
"name": "backend-ai",
"purl": "pkg:pypi/backend-ai",
"ecosystem": "PyPI"
},
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-ww28-4m4v-cq4j/GHSA-ww28-4m4v-cq4j.json"
}
}
],
"modified": "2026-10-27T15:30:03.251653767Z",
"provider": "osv",
"references": [
"https://nvd.nist.gov/vuln/detail/CVE-2025-49652",
"https://github.com/lablup/backend.ai/commit/37fc8f70f9bad2dd01fe2e288f9006e96f9914ed",
"https://github.com/lablup/backend.ai/commit/b6d3ddd9e285a7ce59722a37585b9298681eb82f",
"https://github.com/lablup/backend.ai/commit/d7704f506e319acff205d91bfca6e2ca92939983",
"https://github.com/lablup/backend.ai",
"https://github.com/pypa/advisory-database/tree/main/vulns/backend-ai/PYSEC-2026-290.yaml",
"https://hiddenlayer.com/sai_security_advisor/2025-05-backendai-49653",
"https://hiddenlayer.com/sai_security_advisor/2025-06-backendai",
"https://pypi.org/project/backend-ai"
],
"provider_metadata": {
"cwe_ids": [
"CWE-306"
],
"severity": "CRITICAL",
"github_reviewed": true,
"nvd_published_at": "2025-06-09T18:15:26Z",
"github_reviewed_at": "2025-06-11T17:37:45Z"
}
},
"related_cves": [
{
"value": "CVE-2025-49652",
"evidence": "/aliases"
}
],
"security_relevant": true,
"severity_evidence": "/database_specific/severity"
},
"source_id": "core-osv",
"document_id": 462830,
"published_at": "2025-06-09T18:32:17+00:00"
}