This vulnerability (CWE-306: Missing Authentication for Critical Function) in Eclipse KUKSA - Databroker 0.5.0 allows an attacker holding a read-only JWT token to register as a signal provider through the OpenProviderStream API. By exploiting this, the attacker can respond with attacker-controlled data to GetProviderValueRequest messages, causing other clients to receive forged signal data. The flaw arises because the system does not properly authenticate the critical function of registering as a signal provider, allowing privilege escalation from read-only to provider capabilities.

An attacker with a read-only token can impersonate a signal provider and inject forged data into the system. This compromises data integrity for clients relying on the broker for signal values, potentially leading to incorrect or maliciously altered information being consumed by downstream systems or users. The vulnerability has a CVSS 4.0 base score of 8.5, indicating high severity with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch is available, restrict access to the affected API and monitor for unusual provider registration activity if possible. Avoid using version 0.5.0 in production environments or apply compensating controls to prevent unauthorized provider registrations.