CVE-2025-61120

AG Life Logger Android App version v1.0.2.72 and before (package name com.donki.healthy), developed by IO FIT, K.K., contains improper access control…

High · published October 30, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

⚡ A weak point in the AG Life Logger app could let attackers turn your cloud resources into their playground! 🔓 Think of this like a gym locker left unlocked with the combination written on a sticky note nearby — it’s just too easy for someone to walk in and take what isn’t theirs! 🏋️‍♂️ If exploited, attackers could compromise user accounts, breach privacy, and misuse cloud resources, causing potential financial and personal harm. This vulnerability could leave sensitive data exposed like a gym bag on display — no one wants that!

Put simply

Think of this like a gym locker left unlocked with the combination written on a sticky note nearby — it’s just too easy for someone to walk in and take what isn’t theirs! 🏋️‍♂️ The improper access control in AG Life Logger allows exposed credentials to be intercepted, while predictable verification codes make brute-force logins alarmingly simple for attackers.

What to do

If exploited, attackers could compromise user accounts, breach privacy, and misuse cloud resources, causing potential financial and personal harm. This vulnerability could leave sensitive data exposed like a gym bag on display — no one wants that! Update the AG Life Logger app to version 1.0.2.73 or later to patch this vulnerability. Additionally, consider implementing stronger authentication mechanisms and ensuring that sensitive data is encrypted in transit. Regularly review access controls for your cloud resources! This is fixable! Get ahead of the curve by following these steps, and you’ll keep your resources safe! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.1th percentile
Published
2025-10-30T00:00Z
EPSS history
Timeline
  • 30 OCT 00:00Z
    AG Life Logger Android App version v1.0.2.72 and before (package name com.donki.healthy), developed by IO FIT, K.K., contains improper access control…
    cvelistv5