Insufficient Authentication Protection in Two App Studio Journey on iOS

CVE-2025-41459

What is CVE-2025-41459?

The Two App Studio Journey application version 5.5.6 for iOS exhibits a weakness in its local authentication system. This vulnerability allows local attackers to bypass biometric and PIN-based security measures. By utilizing brute-force techniques, attackers can make repeated attempts to guess the user PIN. Additionally, the vulnerability permits runtime manipulations, such as dynamic code injections, further compromising security. The lack of sufficient safeguards poses significant risks, enabling unauthorized access to sensitive information.

References