Hubitat Elevation Home Automation Controllers Authorization Bypass Vulnerability

A vulnerability allowing authorization bypass through user-controlled keys has been identified in Hubitat Elevation home automation controllers, affecting versions prior to 2.4.2.157. This vulnerability could enable a remote authenticated user to manipulate client-side requests and control connected devices beyond their authorized limits.

Impact

Exploitation of this vulnerability could allow an authenticated user to escalate privileges and gain control over devices outside of their authorized scope.