Vulnerability · Published Jan 3, 2026 · Assigned by VulnCheck

CVE-2025-3653Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint

High 7.3

In plain English

A high-severity security flaw in Smart Pet Feeder Platform from Petlibrio. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.3%top 83.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary serial numbers without ownership verification. Attackers can control any device by sending serial numbers to device control APIs to change feeding schedules, trigger manual feeds, access camera feeds, and modify device settings without authorization checks.

Affected products (as reported)

Vendor	Product	Versions
Petlibrio	Smart Pet Feeder Platform	0 – through 1.7.31

Weakness: CWE-612 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

Security Research: Petlibro: Your Pet Feeder Is Feeding Data To Anyone Who Asks third-party-advisory, technical-description
VulnCheck Advisory: Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint third-party-advisory