Gardyn Hard-Coded Credential Vulnerability in Mobile Application and Device Firmware
Vulnerability
A vulnerability exists in the Gardyn mobile application and device firmware due to hard-coded storage credentials that do not properly restrict user permissions or expire in a timely manner. This issue could potentially allow unauthorized access to production storage containers. The vulnerability affects the Gardyn Home Kit and Gardyn Studio, specifically in the mobile application versions prior to 2.11.0 and the cloud API versions prior to 2.12.2026.
Impact
Exploitation of this vulnerability could enable unauthorized users to access and control Gardyn edge devices, retrieve cloud-based user information, and disrupt connected devices within the Gardyn ecosystem.
Remediation
Users are advised to update their Gardyn mobile application to version 2.11.0 or later and ensure their Gardyn Home Kit or Studio devices are running firmware version master.622 or later. For assistance, contact Gardyn support.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.