Changes.Watch~ upgrade verdicts ~
Free digest
ExploitedPHP2Shell is now on CISA KEV

critical vulnerability

BackendAI Missing Authentication for Critical Function

Fix availableCritical · CVSS 9.8EPSS 0.43%

Published Jun 9, 2025 · updated Oct 27, 2026

What to do

  1. Upgrade to a fixed version: backend.ai 25.15.6, backend.ai 25.19.0rc1.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIbackend.ai17 downloads/week

Vulnerable versions
< 25.15.6
Fixed in
25.15.6

Check your project: pip show backend.ai

PyPIbackend.ai17 downloads/week

Vulnerable versions
>= 25.16.0rc1, < 25.19.0rc1
Fixed in
25.19.0rc1

Check your project: pip show backend.ai

Sources

CWE-306 Missing Authentication for Critical Function

← All critical vulnerabilities