CVE-2025-3660HIGH 6.5EPSS p8.5%

CVE-2025-3660CVE-2025-3660

petlibro / petlibro

Description

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to retrieve sensitive information including pet details, member IDs, and avatar URLs without proper authorization checks.

Scoring

CVSS 3.16.5 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS0.19% probability of exploitation · percentile 8.5% · 2026-08-03T12:00:16Z
Published2026-01-04
Last modified2026-07-20

Underlying weaknesses· 1

CWE-612

References

  1. https://bobdahacker.com/blog/petlibro
  2. https://www.vulncheck.com/advisories/petlibro-smart-pet-feeder-platform-through-broken-access-control-via-api-endpoint

1

TypeTargetConfidenceTier
WeaknessImproper Authorization of Index Containing Sensitive Informationcwe-6120%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-3646
CVE
CVE-2025-3653
CVE
CVE-2025-3654
CVE
CVE-2025-15115
CVE
CVE-2026-22453
CVE
CVE-2025-60316
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.