Data Exposure Vulnerability in Lablup's BackendAI Management Platform
CVE-2025-49653

8HIGH

Key Information:

Vendor

Lablup

Status
Backendai
Vendor
CVE Published:
9 June 2025

What is CVE-2025-49653?

A security flaw in Lablup's BackendAI allows unauthorized access to sensitive user data during active sessions. This vulnerability can be exploited by attackers to obtain user credentials, putting the integrity of the management platform at risk. Users of BackendAI should be vigilant and ensure that proper security measures are implemented to protect against potential data leaks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BackendAI *

References

https://hiddenlayer.com/sai_security_advisor/2025-06-back...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Esteban Tonglet
JSON
.