Petlibro: Your Pet Feeder Is Feeding Data To Anyone Who Asks | bobdahacker

A security researcher discovered multiple critical vulnerabilities in Petlibro’s smart pet feeder app, including an authentication bypass that allows complete account takeover, access to private audio recordings, and device hijacking. Despite being reported over two months ago, the authentication bypass remains active for ‘legacy compatibility’, posing a significant risk to millions of pet owners.