CVE-2025-3660: Petlibro

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to retrieve sensitive information including pet details, member IDs, and avatar URLs without proper authorization checks.

Affected products

• Petlibro Petlibro: up to and including 1.7.31

Published 2026-01-04. Last modified 2026-10-07.