CVE-2026-105034— EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
Quick assessment
Affected
EnergizeLab NestJS auth service
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
EnergizeLab Eilik 的 NestJS 身份验证服务在无需身份验证的情况下，为任意机器人序列号签发设备令牌。未经身份验证的远程攻击者可以为任何序列号获取有效的设备令牌，并冒充该设备与云服务进行交互。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-105034
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
Source: CVE Program / CVE List V5
Vulnerability Description
The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| EnergizeLab | NestJS auth service | 1.8.2 | - |
|
II. Public POCs for CVE-2026-105034
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-105034
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-105034 (1)
-
🔗 Multiple EnergizeLab Eilik / Eiliko Platform Vulnerabilities :: AHA! third-party-advisory
Other References for CVE-2026-105034 (1)
Other References for CVE-2026-105034 (1)
Same Patch Batch · EnergizeLab · 2026-10-15 · 9 CVEs total
| CVE-2026-105037 | 9.9 CRITICAL | EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read |
| CVE-2026-105038 | 9.8 CRITICAL | EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching |
| CVE-2026-105039 | 9.6 CRITICAL | EnergizeLab Station Middleware Admin APIs Missing Role Checks |
| CVE-2026-105032 | 9.1 CRITICAL | EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write |
| CVE-2026-105033 | 8.8 HIGH | EnergizeLab AI Station Default Root Credentials with SSH Enabled |
| CVE-2026-105040 | 8.8 HIGH | EnergizeLab Eilik User-ID Mass Assignment Account Takeover |
| CVE-2026-105035 | 7.8 HIGH | EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key |
| CVE-2026-105036 | 7.5 HIGH | EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks |
IV. Related Vulnerabilities
Same vendor: EnergizeLab
-
CVE-2026-105040
EnergizeLab Eilik User-ID Mass Assignment Account Takeover -
CVE-2026-105039
EnergizeLab Station Middleware Admin APIs Missing Role Check -
CVE-2026-105038
EnergizeLab Eilik Unauthenticated AI Model Administration an -
CVE-2026-105037
EnergizeLab Station Middleware Authenticated Path Traversal -
CVE-2026-105036
EnergizeLab Firmware Updates Downloaded over HTTP Without In
Same weakness: CWE-306
-
CVE-2026-111322
Archon 0.2.13 through 0.11.1 Missing Authentication via /api -
CVE-2026-111312
OpenHealth through 0.2.0 Missing Authentication via /api/hea -
CVE-2026-105038
EnergizeLab Eilik Unauthenticated AI Model Administration an -
CVE-2026-84731
Pre-Authentication Admin Bypass and Remote Code Execution in -
CVE-2026-39997
Unauthenticated Remote Input Injection in QNAP HD Station's
V. Comments for CVE-2026-105034
No comments yet