{"id":"CVE-2026-49994","published":"2026-09-28T18:17:22.250","lastModified":"2026-09-28T20:17:10.420","description":"Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/* handlers (settings, devices, groups, per-device endpoints including /api/device/{mac}/notes) called no auth check at all. A network attacker reachable on the dashboard port could read Bluetooth tracking data and modify application state — including the heartbeat URL, prune retention, device groups, and per-device notes — without a session cookie. This issue has been patched in version 0.7.1.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-306","CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://github.com/dannymcc/bluehood/commit/401479938c0deb1f6f6847d442f98a2d03efca68","tags":[]},{"url":"https://github.com/dannymcc/bluehood/releases/tag/v0.7.1","tags":[]},{"url":"https://github.com/dannymcc/bluehood/security/advisories/GHSA-qj2j-wcg3-74jw","tags":[]}],"exploitRefs":[{"url":"https://github.com/dannymcc/bluehood/commit/401479938c0deb1f6f6847d442f98a2d03efca68","tags":[]},{"url":"https://github.com/dannymcc/bluehood/releases/tag/v0.7.1","tags":[]},{"url":"https://github.com/dannymcc/bluehood/security/advisories/GHSA-qj2j-wcg3-74jw","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw in Bluehood allowed network attackers to read Bluetooth tracking data and modify application state without a session cookie, posing a significant security risk.","exploitability":"Exploitation is relatively easy for a network attacker with access to the dashboard port, requiring no session cookie.","blast_radius":"If exploited, the attacker could modify critical application settings, potentially leading to data loss or misconfiguration.","remediation":"Upgrade to version 0.7.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","bluetooth","config-modification"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-29T08:54:29.385Z"}}