CVE-2025-49652 Improper access control allows arbitrary account creation
Attackers can create arbitrary accounts to access private data in Lablup BackendAI, even when registration is disabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-49652?
CVE-2025-49652 is a critical missing authorization vulnerability in Lablup BackendAI, published on 9 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Weakness: CWE-306
Which versions are affected by CVE-2025-49652?
5 open source packages ship an affected version, including backend-ai and backend.ai.
| Package | Affected | Fixed in |
|---|---|---|
backend-ai PyPI | All versions | 25.15.6, 25.19.0rc1 |
backend-ai PyPI | All versions | 25.15.6 |
backend-ai PyPI | From 25.16.0rc1 | 25.19.0rc1 |
backend.ai PyPI | All versions | 25.15.6 |
backend.ai PyPI | From 25.16.0rc1 | 25.19.0rc1 |
How do I fix CVE-2025-49652?
Upgrade backend-ai to a fixed version for your release line: 25.15.6 or 25.19.0rc1.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-49652 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-49652 exists.
Sources
Also known as GHSA-ww28-4m4v-cq4j, PYSEC-2026-290.