PT-2026-1182 · Petlibro · Petlibro Smart Pet Feeder Platform

Bobdahacker · Published 2026-01-03 · Updated 2026-02-03 · CVE-2025-3654

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Petlibro Smart Pet Feeder Platform versions up to 1.7.31

Description The Petlibro Smart Pet Feeder Platform is affected by an information disclosure issue. This allows unauthorized access to device hardware information. An attacker can obtain device serial numbers and MAC addresses by exploiting insecure API endpoints. The /device/devicePetRelation/getBoundDevices API endpoint is vulnerable, allowing retrieval of information using pet IDs. This enables full device control without proper authorization.

Recommendations Update to a version later than 1.7.31.

Fix

Weakness Enumeration

CWE-612

Related Identifiers

CVE-2025-3654

Affected Products

Petlibro Smart Pet Feeder Platform

References · 8

• https://osv.dev/vulnerability/CVE-2025-3654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-3654 · Security Note
• https://t.me/CVEtracker/41323 · Telegram Post
• https://t.me/cveNotify/147648 · Telegram Post
• https://vulncheck.com/advisories/petlibro-smart-pet-feeder-platform-through-information-disclosure-via-api-endpoint · Note
• https://bobdahacker.com/blog/petlibro · Note
• https://t.me/cveNotify/150773 · Telegram Post
• https://twitter.com/CVEnew/status/2007600721588277694 · Twitter Post