Kiosk mode security issues

Dashboards
2

I’ve just found a method to exit the kiosk mode entirely (without needing the password).

Prerequisites:

  • You should have no Moods
  • You should have a Favorite Moods widget on your dashboard
  • You should have at least 1 light device

Steps to reproduce:

  1. With the favorite Moods widget, activate Kiosk Mode. You can now no longer exit the dashboard.
  2. Click the “Add favorite Mood“ button.
  3. Now click “Create Mood“.
  4. You should now run through the process to create a Mood with the light.
  5. After clicking “Create“, you are now sent to the Devices tab from where you can click through to any tab and do anything on the Homey.