Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-53649 EUVD-2025-22978GHSA-mhp8-7xp2-chw4

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12.…

Published Jul 29, 2025 · Updated Jul 29, 2025 · Assigned by jpcert

Description

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs.

Affected products

VendorProductAffectedFixed
SwitchBot SwitchBot App for iOS/Android V6.24 through V9.12 —

References