Archive · 30 Jul 2025
Lovense App Security Flaws Expose User Emails and Accounts
A security flaw in the Lovense app, used for controlling sex toys, allowed hackers to potentially access users' email addresses and take over their accounts.
A researcher found these problems and reported them.
While Lovense paid the researcher a reward, the company was slow to fix the issues.
Now, they are working on a software update to solve the problems.
A cybersecurity researcher discovered vulnerabilities in the Lovense app.
The vulnerabilities exposed user email addresses and allowed for account takeovers.
The researcher reported the flaws to Lovense and received a bug bounty.
Lovense plans to release a patch for the email disclosure bug within a week.
The company has already addressed the account takeover bug.
- Who
- A cybersecurity researcher, identified as BobDaHacker, discovered the flaws.
- What
- Security vulnerabilities in the Lovense app, potentially exposing user email addresses and enabling account takeovers.
- When
- The vulnerabilities were discovered in July 2024; the researcher reported them in March.
- Where
- The vulnerabilities affected users of the Lovense app.
- Why
- The vulnerabilities allowed access to user information and account control.
Researcher Concerns
Lovense Response
Response to the Vulnerabilities
Researcher Concerns
Researcher highlighted risk of user privacy and account security due to email leaks and account takeover.
Lovense Response
Lovense has now fixed the account takeover bug and plans to release a patch for the email issue soon.
- Company
- Lovense
- Users affected
- Potentially millions
- Vulnerability types
- Email disclosure, account takeover
- Researcher's handle
- BobDaHacker
- Bug bounty reward
- $3,000
- Planned fix
- Software patch for email disclosure