Automotive Grade Linux Kooky Koi 11.0.0 11.0.1 11.0.2 11.0.3 11.0.4 and 11.0.5 is affected by Incorrect Access Control in usr/bin/afb-daemon. To exploit the vulnerability an attacker should send a well-crafted HTTP (or WebSocket) request to the socket listened by the afb-daemon process. No credentials nor user interactions are required.