Is CVE-2026-105034 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105034?

CVE-2026-105034 has a CVSS v3 severity of HIGH (8.2).

Back

CVE-2026-105034

Description

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.