Junglewise Threat Intelligence

CVE-2025-49651: PYSEC-2026-1210 - Backend.AI Missing Authorization vulnerability

CVE-2025-49651 · Severity: low · CVSS 3.1 · Published 2026-07-07

Technologies: backend-ai (PyPI). Vendors: PyPI.

Executive brief

Backend.AI Missing Authorization vulnerability

Affected products

PyPI backend-ai

Related threats

PYSEC-2026-1211 - BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
PYSEC-2026-290 - BackendAI Missing Authentication for Critical Function