Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-64308 EUVD-2025-197665GHSA-wj9f-8875-4rpw

Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

Published Nov 14, 2025 · Updated Jun 25, 2026 · Assigned by icscert

Vendor: Brightpick AI Product: Brightpick Mission Control / Internal Logic Control

Description

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal.

Affected products

VendorProductAffectedFixed
Brightpick AI Brightpick Mission Control / Internal Logic Control < 1.67.0 1.67.0

Advisories 1

References