Insufficient Authentication Protection in Two App Studio Journey on iOS
CVE-2025-41459
What is CVE-2025-41459?
The Two App Studio Journey application version 5.5.6 for iOS exhibits a weakness in its local authentication system. This vulnerability allows local attackers to bypass biometric and PIN-based security measures. By utilizing brute-force techniques, attackers can make repeated attempts to guess the user PIN. Additionally, the vulnerability permits runtime manipulations, such as dynamic code injections, further compromising security. The lack of sufficient safeguards poses significant risks, enabling unauthorized access to sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Journey iOS 0 <= 5.5.9
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
