CVE-2026-49994

Summary

The flaw in Bluehood allowed network attackers to read Bluetooth tracking data and modify application state without a session cookie, posing a significant security risk.

Exploitability

Exploitation is relatively easy for a network attacker with access to the dashboard port, requiring no session cookie.

Blast radius

If exploited, the attacker could modify critical application settings, potentially leading to data loss or misconfiguration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 0.7.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.