Description
Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads. A remote, unauthenticated attacker can upload firmware files on the device and consume storage resources. Fixed in 12.3.6.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nanoleaf | Lines | 12.3.2 – < 12.3.6 | 12.3.6 |
Advisories 1
- VA-26-084-01 Nanoleaf Lines unauthenticated firmware file store CISA ICS & IT advisories · Apr 2, 2026