{"id":"01M6MYE77CS2BG7Q13VKJ3TDEY","product_id":"01M6MYE6XAG39V4WJD6F7Q4B04","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"Troy Hunt documented exposed CloudPets account records in 2017, including references to voice files retrievable without authorization when their URLs were known.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"CloudPets data exposure investigation","url":"https://www.troyhunt.com/data-from-connected-cloudpets-teddy-bears-leaked-and-ransomed-exposing-kids-voice-messages/","publisher":"Troy Hunt","publishedAt":"2017-02-27"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Removed malicious/always-on microphone/exfiltration labels and the false claim that audio files themselves were stored in MongoDB. This is not independent device verification.","created_at":1793851858156,"updated_at":1793917832000,"slug":"spiral-toys-cloudpets","vendor":"Spiral Toys","model":"CloudPets","category":"toy","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYE77CS2BG7Q13VKJ3TDEY","product_url":"https://isitspying.com/p/spiral-toys-cloudpets","findings":[{"id":"accuracy:01M6MYE77CS2BG7Q13VKJ3TDEY:0","report_id":"01M6MYE77CS2BG7Q13VKJ3TDEY","kind":"security_vulnerability","severity":"unrated","detail":"Historical backend exposure: account database records and unauthenticated access to referenced voice-file URLs.","ai_model":null}],"contacted_hosts":[],"evidence":[]}