Read the docs

Govee

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Govee records in CISA KEV

No Govee vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Led Strip Firmware 2 records MEDIUM Home 1 record LOW

Records

5 records

TI-2023-04259 CVE-2023-4617 · GHSA-59pp-rvhc-93rh

Gaining remote control over Govee devices

Priority MEDIUM 50

Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other users via changing "device", "sku" and "type" fields' values…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00607 Published 2024-12-19 Fixed in 5.9 CWE-863
TI-2025-09990 CVE-2025-10910 · GHSA-7fj8-g5x7-m9v3

Gaining remote control over Govee devices

Priority MEDIUM 48

A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00389 Published 2025-12-18 No fix listed CWE-639
TI-2023-22515 CVE-2023-42189 · GHSA-gg6j-gxcg-jjcm

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK…

Priority MEDIUM 41

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2023-10-10 No fix listed CWE-732
TI-2023-03371 CVE-2023-3612 · GHSA-2pgp-5w4w-9255

Unprotected WebView access in Govee Home App

Priority LOW 39

Govee Home app has unprotected access to WebView component which can be opened by any app on the device.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00513 Published 2023-09-11 Fixed in 5.8.01 CWE-749
Open these records in search →