CVE-2025-59451

Description

The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://bishopfox.com/blog/advisories ↗
• https://shop.yosmart.com/pages/product-support ↗
• https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home ↗
• https://shop.yosmart.com/pages/sa-2025-001 ↗