High · published January 4, 2026
⚠️ An unauthorized pet parent can mess with your pet's feeding schedule! This access control vulnerability in Petlibro Smart Pet Feeder allows attackers to manipulate devices using arbitrary serial numbers. 🐾 Think of it as a restaurant where anyone can walk in and change the order for any table just by knowing the table number. The staff don’t bother to check if the person making the change is actually seated there! This vulnerability could let an attacker change feeding schedules, trigger manual feeds, or even access your pet's camera feed without any authorization. Imagine a stranger adjusting your pet's meal times or spying on them instead of you! That's absolutely concerning!
Think of it as a restaurant where anyone can walk in and change the order for any table just by knowing the table number. The staff don’t bother to check if the person making the change is actually seated there! Petlibro Smart Pet Feeder platforms up to version 1.7.31 lack proper ownership verification for serial numbers, allowing unauthorized manipulation of device functions through API requests.
This vulnerability could let an attacker change feeding schedules, trigger manual feeds, or even access your pet's camera feed without any authorization. Imagine a stranger adjusting your pet's meal times or spying on them instead of you! That's absolutely concerning! Update your Petlibro Smart Pet Feeder to version 1.7.32 or later immediately. Also, ensure that your network settings are configured to limit access to trusted devices only. Regularly review and monitor your device logs for any unauthorized access attempts. You’ve got this! With these steps, you can keep your furry friend’s feeding routine safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| petlibro/petlibro | ≤ 1.7.31 | — |