CVE-2022-37193: Chipolo

High severity, CVSS 7.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from access revocation evasion attacks once the malicious sharee obtains the access credentials.

Affected products

• Chipolo Chipolo: version 4.13.0 only

Published 2022-09-27. Last modified 2026-06-17.