High · published January 4, 2026
⚠️ A tiny gap in the Petlibro Smart Pet Feeder could let anyone add themselves as a shared owner! Imagine a nosy neighbor just inviting themselves to your dinner party without a proper invite! 🐾 Think of your Pet Feeder as a trendy café where customers can bring friends. If the café forgot to check who’s on the guest list, anyone could just walk in and claim a spot at the table, leaving the regulars feeling uneasy. This vulnerability opens the door for unauthorized users to snoop around and gain access to private owner information. Picture someone using your pet feeder settings to make unauthorized adjustments, or worse, having access to your personal data. While it’s not immediately exploitable in the wild, it’s definitely worth addressing!
Think of your Pet Feeder as a trendy café where customers can bring friends. If the café forgot to check who’s on the guest list, anyone could just walk in and claim a spot at the table, leaving the regulars feeling uneasy. The issue arises from missing permission checks in the device share API of Petlibro Smart Pet Feeder, allowing unauthorized requests to add users as shared owners without proper validation.
This vulnerability opens the door for unauthorized users to snoop around and gain access to private owner information. Picture someone using your pet feeder settings to make unauthorized adjustments, or worse, having access to your personal data. While it’s not immediately exploitable in the wild, it’s definitely worth addressing! Update to Petlibro Smart Pet Feeder version 1.7.32 or later to patch this vulnerability. Additionally, review your device sharing settings and ensure proper access controls are enforced moving forward. Don’t wait until it’s too late! You’ve got this! By following these steps, you can keep your pet feeding system secure and your dinner parties private! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| petlibro/petlibro | ≤ 1.7.31 | — |