PyPI/backend-ai CVE-2025-49651: high 8.1, EPSS 0.34%
Backend.AI Missing Authorization vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 25.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1210
- https://nvd.nist.gov/vuln/detail/CVE-2025-49651
- https://github.com/lablup/backend.ai/pull/7587
- https://github.com/lablup/backend.ai
- https://hiddenlayer.com/sai_security_advisor/2025-05-backendai-49653
- https://hiddenlayer.com/sai_security_advisor/2025-06-backendai
- https://pypi.org/project/backend-ai
- https://github.com/advisories/GHSA-h889-475r-wfmm
CVE-2025-49651 · published · modified · JSON