Read the docs
TI-2026-69978 Aliases CVE-2026-8374GHSA-33hw-v5j3-gx3r

Cryptographic misuse in SwitchBot Bluetooth allows lock bypass

Priority LOW 37CWE-1204Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Affected are SwitchBot Lock, Lock Pro, Lock Wifi, Lock Ultra, Lock Lite and other products before their fixed versions. Misuse and misconfiguration of cryptography in Bluetooth communication, including weak initialization vector generation (CWE-1204), lets a manipulated communication protocol bypass the electronic lock and its access controls. A local attacker needs no privileges or user interaction to do this.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00089 0th percentileScored 2026-11-07
Fix Fixed SwitchBot Lock (SwitchBot): 7.7SwitchBot Lock Pro (SwitchBot): 3.7+8 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SwitchBotSwitchBot Lockbefore 7.77.7Patch availableCNA
SwitchBotSwitchBot Lock Probefore 3.73.7Patch availableCNA
SwitchBotSwitchBot Lock Wifibefore 15.2115.21Patch availableCNA
SwitchBotSwitchBot Lock Ultrabefore 2.82.8Patch availableCNA
SwitchBotSwitchBot Lock Litebefore 7.77.7Patch availableCNA
SwitchBotSwitchBot Keypadbefore 2.92.9Patch availableCNA
SwitchBotSwitchBot Keypad Touchbefore 2.92.9Patch availableCNA
SwitchBotSwitchBot Keypad Visionbefore 2.52.5Patch availableCNA
SwitchBotSwitchBot Keypad Vision Probefore 1.01.0Patch availableCNA
SwitchBotSwitchBot Appbefore 9.189.18Patch availableCNA
  • SwitchBot Lock VendorSwitchBot Affected before 7.7 Fixed in 7.7 Patch available CNA
  • SwitchBot Lock Pro VendorSwitchBot Affected before 3.7 Fixed in 3.7 Patch available CNA
  • SwitchBot Lock Wifi VendorSwitchBot Affected before 15.21 Fixed in 15.21 Patch available CNA
  • SwitchBot Lock Ultra VendorSwitchBot Affected before 2.8 Fixed in 2.8 Patch available CNA
  • SwitchBot Lock Lite VendorSwitchBot Affected before 7.7 Fixed in 7.7 Patch available CNA
  • SwitchBot Keypad VendorSwitchBot Affected before 2.9 Fixed in 2.9 Patch available CNA
  • SwitchBot Keypad Touch VendorSwitchBot Affected before 2.9 Fixed in 2.9 Patch available CNA
  • SwitchBot Keypad Vision VendorSwitchBot Affected before 2.5 Fixed in 2.5 Patch available CNA
  • SwitchBot Keypad Vision Pro VendorSwitchBot Affected before 1.0 Fixed in 1.0 Patch available CNA
  • SwitchBot App VendorSwitchBot Affected before 9.18 Fixed in 9.18 Patch available CNA

Remediation

SwitchBot Lock is fixed in 7.7, SwitchBot Lock Pro in 3.7, SwitchBot Lock Wifi in 15.21, SwitchBot Lock Ultra in 2.8, SwitchBot Lock Lite in 7.7, SwitchBot Keypad in 2.9, SwitchBot Keypad Touch in 2.9, SwitchBot Keypad Vision in 2.5, SwitchBot Keypad Vision Pro in 1.0, and SwitchBot App in 9.18.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA SwitchBot Lock (SwitchBot) Fixed in 7.7
  • Fix · CNA SwitchBot Lock Pro (SwitchBot) Fixed in 3.7
  • Fix · CNA SwitchBot Lock Wifi (SwitchBot) Fixed in 15.21
  • Fix · CNA SwitchBot Lock Ultra (SwitchBot) Fixed in 2.8
  • Fix · CNA SwitchBot Lock Lite (SwitchBot) Fixed in 7.7
  • Fix · CNA SwitchBot Keypad (SwitchBot) Fixed in 2.9
  • Fix · CNA SwitchBot Keypad Touch (SwitchBot) Fixed in 2.9
  • Fix · CNA SwitchBot Keypad Vision (SwitchBot) Fixed in 2.5
  • Fix · CNA SwitchBot Keypad Vision Pro (SwitchBot) Fixed in 1.0
  • Fix · CNA SwitchBot App (SwitchBot) Fixed in 9.18

Timeline

  1. 2026-10-09 Threatist record created from CVE-2026-8374
  2. 2026-10-09 Alias added: GHSA-33hw-v5j3-gx3r
  3. 2026-10-11 Priority changed: MEDIUM → LOW
  4. 2026-10-16 CISA SSVC decision points changed
  5. 2026-10-30 Fix available: SwitchBot/SwitchBot [email protected], SwitchBot/SwitchBot Keypad [email protected], SwitchBot/SwitchBot Keypad Vision [email protected] +7 · CNA

References

Other 2

  • TI-2023-22515 Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK… CVSS 3.1HIGH 7.5
  • TI-2025-40175 Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code… CVSS 4.0HIGH 8.6
  • TI-2025-33573 Sensitive information in log files in SwitchBot App for iOS/Android CVSS 4.0MEDIUM 5.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences