Auth bypass in Sysadminsmedia Homebox

CVE-2025-53108

HomeBox is a home inventory and organization system. Prior to 0.20.1, HomeBox contains a missing authorization check in the API endpoints responsible for updating and deleting inventory item attachments. This flaw allows authenticated user…

Vulnerability class: Broken Access Control

EPSS: 0.003 (17.4th percentile) — read the EPSS interpretation.