Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.CreditsEsteban TongletReferenceshttps://hiddenlayer.com/sai_security_advisor/2025-06-backendai/