Threats tagged 'ghsa-5jxr-5v22-49gf'

The MQTT broker embedded in Yarbo firmware version 2.3.9 allows anonymous connections without any topic-level read or write access controls. This misconfiguration enables any host on the same network to subscribe to sensitive telemetry data or publish control messages to the robot without authentication or authorization.