Cryptographic Flaw in Twonky Server Affects User Security

CVE-2025-13316

What is CVE-2025-13316?

Twonky Server versions 8.5.2 for both Linux and Windows contain a severe cryptographic vulnerability that exposes the system to unauthorized access. The flaw revolves around the use of hard-coded cryptographic keys, enabling attackers who possess knowledge of the encrypted administrator password to decrypt it with static keys. This breach allows an attacker to view the plain text password, potentially granting them administrator-level access to the Twonky Server, compromising user data and privacy.

References