Junglewise Threat Intelligence

CVE-2025-49652: PYSEC-2026-290 - BackendAI Missing Authentication for Critical Function

CVE-2025-49652 · Severity: low · CVSS 3.1 · Published 2026-06-29

Technologies: backend-ai (PyPI). Vendors: PyPI.

Executive brief

BackendAI Missing Authentication for Critical Function

Affected products

PyPI backend-ai

Related threats

PYSEC-2026-1210 - Backend.AI Missing Authorization vulnerability
PYSEC-2026-1211 - BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor