CVE-2026-54382High· 7.7▾ TwilightVitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being restricted to their own folder. Attackers can overwrite other users' objects in the shared S3 bucket using credentials obtained via CVE-2026-54378, destroying original content without triggering deletion protections.
VitaFit < 2026-10-30Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-54384Critical· 9.8VitaFit Cloud API Authentication Bypass via POST /front/login/sns/
CVE-2026-54383Medium· 6.5VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint
CVE-2026-54381High· 7.5VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure
CVE-2026-54378Critical· 9.6VitaFit Cloud API Broken Access Control via S3 Token Endpoint
CVE-2026-54380Medium· 5.4VitaFit Cloud API Stored XSS via SVG File Upload
CVE-2026-54377Medium· 6.5VitaFit Cloud API IDOR via profile_id Endpoints