Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request.Referenceshttp://nanoleaf.comhttps://pwning.tech/cve-2022-46640/