Skip to content
OpenAdvisories

Vendor

Govee

3 known vulnerabilities.

Products

Govee Home 2 H6056 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-10910

    Gaining remote control over Govee devices

    A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the device from its legitimate owner’s acco…

    Govee H6056
  • Critical 10.0
    CVE-2023-4617

    Gaining remote control over Govee devices

    Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other users via changing "device", "sku" and "type" fields' values.  This issue affects Govee Home applic…

    Govee Govee Home