Authentication Bypass in rust-iot-platform by IoT Ecology

CVE-2026-82452

What is CVE-2026-82452?

The rust-iot-platform is vulnerable to an authentication bypass due to insufficient safeguards in its REST API handler signatures. This weakness enables unauthenticated attackers to access unprotected API endpoints, allowing them to create, update, list, retrieve, and delete user accounts without any validation of credentials. This vulnerability poses a significant risk as it could lead to unauthorized modifications and access of sensitive user data.

References