CVE-2022-45482: Lazy Mouse Project Lazy Mouse

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

• Lazy Mouse Project Lazy Mouse: up to and including 2.0.1

Published 2022-12-02. Last modified 2026-06-17.