Improper access control allows arbitrary account creation
Priority HIGH 82CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-306.
Summary
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00446 39th percentileScored 2026-11-07
Fix Fixed BackendAI (Lablup): 25.15.6backend.ai (PyPI): 25.15.6, 25.19.0rc1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lablup | BackendAI | before 25.15.6 | 25.15.6 | Patch available | CNA |
| — | backend.ai (PyPI) | before 25.15.6 | 25.15.6 | Patch available | GHSA-ww28-4m4v-cq4j |
| — | backend.ai (PyPI) | 25.16.0rc1 to before 25.19.0rc1 | 25.19.0rc1 | Patch available | GHSA-ww28-4m4v-cq4j |
- BackendAI VendorLablup Affected before 25.15.6 Fixed in 25.15.6 Patch available CNA
- backend.ai (PyPI) Vendor— Affected before 25.15.6 Fixed in 25.15.6 Patch available GHSA-ww28-4m4v-cq4j
- backend.ai (PyPI) Vendor— Affected 25.16.0rc1 to before 25.19.0rc1 Fixed in 25.19.0rc1 Patch available GHSA-ww28-4m4v-cq4j
Remediation
- Fix · CNA BackendAI (Lablup) Fixed in 25.15.6
- Fix · GHSA-ww28-4m4v-cq4j backend.ai (PyPI) Fixed in 25.15.6 Advisory →
- Fix · GHSA-ww28-4m4v-cq4j backend.ai (PyPI) Fixed in 25.19.0rc1 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2025-49652
- 2026-10-03 Alias added: GHSA-ww28-4m4v-cq4j
- 2026-10-15 Fix available: Lablup/[email protected] · CNA
References
Other 9
- https://hiddenlayer.com/sai_security_advisor/2025-06-backendai/
- https://github.com/lablup/backend.ai/commit/37fc8f70f9bad2dd01fe2e288f9006e96f9914ed
- https://github.com/lablup/backend.ai/commit/b6d3ddd9e285a7ce59722a37585b9298681eb82f
- https://github.com/lablup/backend.ai/commit/d7704f506e319acff205d91bfca6e2ca92939983
- https://github.com/lablup/backend.ai
- https://github.com/pypa/advisory-database/tree/main/vulns/backend-ai/PYSEC-2026-290.yaml
- https://hiddenlayer.com/sai_security_advisor/2025-05-backendai-49653
- https://hiddenlayer.com/sai_security_advisor/2025-06-backendai
- https://pypi.org/project/backend-ai
More Lablup vulnerabilities
- TI-2025-31625 Exposure of sensitive Information allows account takeover CVSS 3.1HIGH 8.0
- TI-2025-31623 Missing Authorization for Interactive Sessions CVSS 3.1HIGH 8.1
Sources
- CVE-2025-49652 · CVE Program
- CVE-2025-49652 · NVD
- FIRST EPSS
- GHSA-ww28-4m4v-cq4j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences