Daikin Security Gateway Vulnerability Allows Unauthorized System Access

Daikin’s Security Gateway has a critical authentication bypass vulnerability tracked as CVE-2025-10127, discovered by security researchers and affecting Security Gateway systems running App version 100 and Frm version 214. The flaw stems from a weak password recovery mechanism and an authorization bypass via a user-controlled key, enabling attackers to access industrial control systems without credentials.

A public Proof of Concept exploit was authored by security researcher Gjoko Krstic and was reported to Daikin, with CISA describing the find in their advisory alongside the reported PoC details. The CVSS scores are listed as 9.8 (CVSS 3.1) and 8.8 (CVSS 4.0), and the attack is network-based with low complexity, requiring no privileges or user interaction.

In a rare move, Daikin has stated it will not fix the vulnerability and will respond only to individual user inquiries; CISA recommends organisations keep control system devices off the internet, behind firewalls, and to use secure remote access methods such as updated VPNs where necessary. according to CISA.