Missing Bricks: Finding Security Holes in LEGO APIs

https://salt.security/blog/missing-bricks-finding-security-holes-in-lego-apis

…