CVE-2026-82452

Name of the Vulnerable Software and Affected Versions rust-iot-platform versions prior to commit 5df942ab

Description An authentication bypass exists because most REST API routes lack authentication guards in their handler signatures. This allows unauthenticated attackers to perform administrative actions, including creating, updating, listing, retrieving, and deleting user accounts, by directly accessing unprotected endpoints without valid credentials.

Recommendations Update rust-iot-platform to a version beyond commit 5df942ab.