CVE-2026-54382

The VitaFit cloud API contained an improper access control vulnerability in its Cognito-issued AWS role prior to 2026-10-30. This misconfiguration allows authenticated attackers to perform s3:PutObject operations across a shared S3 bucket, bypassing restrictions that should limit access to indivi...