What is CVE-2025-53649?

CVE-2025-53649 is a medium-severity vulnerability in Switchbot App For Ios/android, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.1/10. Published 2025-07-29.

How severe is CVE-2025-53649?

Medium severity. CVSS v3 base score is 5.1 out of 10.

Information disclosure in Switchbot App For Ios/android

CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs.

EPSS: 0.001 (4.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Switchbot App For Ios/android — versions V6.24 through V9.12

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

Frequently asked questions

What is CVE-2025-53649?: CVE-2025-53649 is a medium-severity vulnerability in Switchbot App For Ios/android, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.1/10. Published 2025-07-29.
How severe is CVE-2025-53649?: Medium severity. CVSS v3 base score is 5.1 out of 10.