CVE-2025-64308: Brightpick Ai Brightpick Mission Control / Internal Logic Control

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal.

Affected products

• Brightpick Ai Brightpick Mission Control / Internal Logic Control: before 1.67.0 (fixed in 1.67.0)

Published 2025-11-15. Last modified 2026-10-07.