Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-45361 EUVD-2025-8286GHSA-rjr7-mrw5-5m4x

Mi Connect Service APP protocol flaws lead to leaking sensitive user information

Published Mar 27, 2025 · Updated Jun 23, 2025 · Assigned by Xiaomi

Description

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.

Affected products

VendorProductAffectedFixed
Xiaomi Xiaomi Mi Connect Service Xiaomi Mi Connect Service3.1.895.10 —

References