CVE-2025-49653

8.0 highEPSS 0.3%

High (8.0). EPSS 0.3% chance of exploitation in the next 30 days.

Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users on the management platform.

Severity

8.0 high

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2025-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-hxvr-gg2w-j48x	PyPI	backend-ai	<=25.3.3	no fix published
PYSEC-2026-1211	PyPI	backend-ai	<=25.3.3	no fix published