Unprivileged Control Vulnerability in Tuya Smart Life App Affects Matter Devices
CVE-2025-56557

9.1CRITICAL

Key Information:

Vendor

Tuya

Status
Tuya Smart Life App
Vendor
CVE Published:
16 September 2025

What is CVE-2025-56557?

A vulnerability in version 5.6.1 of the Tuya Smart Life App allows attackers to manipulate Matter devices through the Matter protocol without the need for proper authentication. This flaw poses a significant risk as it potentially enables unauthorized access to connected devices, making them susceptible to various forms of exploitation. Users are advised to remain vigilant and monitor updates from Tuya to mitigate risks associated with this vulnerability.

References

http://tuya.com
https://archive.org/details/tuya-matter-fabric-bug/mode/2up

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.