The Brightpick Internal Logic Control web interface can be accessed without any user authentication. This lack of access control allows unauthorized users to manipulate critical robot control functions such as starting or stopping runners, assigning jobs, clearing stations, and deploying storage totes. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact primarily due to the ability to alter system operations without compromising confidentiality or availability.