Pioneer Rekordbox 安全漏洞

Pioneer Rekordbox 安全漏洞
Security Vulnerability in Pioneer Rekordbox

原始链接: https://alphatheta.com/en/information/important-notice-security-vulnerability-in-pro-dj-link/

AlphaTheta 已发现 rekordbox 和特定 CDJ/XDJ 型号的 PRO DJ LINK 功能存在安全漏洞。该缺陷可能允许同一网络上的未授权方访问已连接计算机或存储介质上的数据。尽管目前尚未收到任何受影响的报告，但在开发修复程序期间，公司将暂不公开技术细节。为了保护您的数据，AlphaTheta 建议采取以下预防措施： * **更新软件：** 确保 rekordbox（6 或 7 版本）已更新至最新版本。 * **安全联网：** 连接播放设备时，仅使用受密码保护的安全 Wi-Fi 网络。 * **数据安全：** 使用 PRO DJ LINK 时，避免使用存有敏感个人信息的 USB 驱动器或 SD 卡。 AlphaTheta 正在寻求永久解决方案，并将在其官方支持页面提供进展更新。建议用户持续关注[官方状态页面](https://support.alphatheta.com/en-US/articles/53214453591216)，以获取固件发布及进一步的说明。

Pioneer “Rekordbox” 软件近期曝出的安全漏洞在 Hacker News 上引发了用户批评，凸显了人们对该平台日益增长的不满。该漏洞可能允许通过“PRO DJ LINK”功能未经授权访问本地文件，许多人认为这反映出该公司将市场主导地位置于软件质量之上的倾向。此次讨论反映出一种普遍的观点：Rekordbox 设计粗糙，容易导致资料库损坏，且越来越难以管理。尽管 Pioneer/AlphaTheta 的硬件是夜店和音乐节的行业标准，迫使 DJ 必须依赖该软件来准备音乐，但用户仍将其描述为“笨重”且“体验糟糕”。许多 DJ 为了维持系统稳定性而拒绝更新，或转向第三方工具来修复数据库问题。最终，各方共识在于：尽管 Pioneer 设备在性能上仍是行业标杆，但其生态系统是靠市场垄断而非用户满意度来维系的。批评者指出，缺乏安全性、文档编写不佳以及资料库管理复杂，根源在于这家公司缺乏动力去改进那些用户别无选择、只能使用的软件。

原文

August 8, 2026

Thank you for your continued support of AlphaTheta products.

We have identified a security vulnerability affecting the PRO DJ LINK function in rekordbox and certain CDJ/XDJ models.

This vulnerability could allow a third party who gains unauthorized access to a PRO DJ LINK network to view data stored on a Windows PC/Mac, or on USB/SD cards inserted into a CDJ/XDJ unit connected to that network.

To prevent misuse, we are withholding technical details until a fix has been made available.

Recommended precautions

We have not confirmed any cases of damage resulting from this vulnerability to date. That said, to help ensure you can continue using our products with confidence, we ask that you take the following precautions:

Update rekordbox (Ver. 7/Ver. 6, iOS/Android) to the latest version.
When using PRO DJ LINK, avoid using USB or SD cards that contain sensitive data.
If you connect your player to a Wi-Fi network, please use a secure, password-protected network.

Next steps

We are currently preparing a fix. Updates on our progress will be posted on this page as they become available.

PRO DJ LINK Vulnerability Response Status: https://support.alphatheta.com/en-US/articles/53214453591216
We remain committed to continuously improving the quality and security of our products so that you can use them with confidence.

We sincerely apologize for any inconvenience this may cause.

Latest firmware: here
Latest rekordbox Ver. 7: here
Latest rekordbox Ver. 6: here
Contact support: here