Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
| Software | From | Fixed in |
|---|---|---|
backend.ai
|
- | 25.3.3.x |