CVE-2026-8374: Lock Series Lock 0 through 3.4; +2 more affected products

Affected technology

Lock Series Lock · 0 through 3.4
SwitchBot

Lock Series Keypad · 0 through 2.7
SwitchBot

Lock Series App · 0 through 9.2.6
SwitchBot

Component: Bluetooth communication

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

An attacker can bypass the electronic lock and access controls via a manipulated communication protocol. Source advisory’s CVSS 4.0 assessment (base score 8.5/10) rates confidentiality impact as low; integrity and availability impact as high.