Pioneer Rekordbox 安全漏洞

Pioneer Rekordbox 安全漏洞
Security Vulnerability in Pioneer Rekordbox

原始链接: https://alphatheta.com/en/information/important-notice-security-vulnerability-in-pro-dj-link/

AlphaTheta 已发现 rekordbox 和特定 CDJ/XDJ 型号的 PRO DJ LINK 功能存在安全漏洞。该缺陷可能允许同一网络上的未授权方访问已连接计算机或存储介质上的数据。尽管目前尚未收到任何受影响的报告，但在开发修复程序期间，公司将暂不公开技术细节。为了保护您的数据，AlphaTheta 建议采取以下预防措施： * **更新软件：** 确保 rekordbox（6 或 7 版本）已更新至最新版本。 * **安全联网：** 连接播放设备时，仅使用受密码保护的安全 Wi-Fi 网络。 * **数据安全：** 使用 PRO DJ LINK 时，避免使用存有敏感个人信息的 USB 驱动器或 SD 卡。 AlphaTheta 正在寻求永久解决方案，并将在其官方支持页面提供进展更新。建议用户持续关注[官方状态页面](https://support.alphatheta.com/en-US/articles/53214453591216)，以获取固件发布及进一步的说明。

近期的一场 Hacker News 讨论凸显了用户对 Pioneer/AlphaTheta 旗下“Rekordbox”软件的普遍不满，此前有报道称该软件存在安全漏洞。该漏洞允许通过“PRO DJ LINK”功能未经授权访问文件，引发了对该软件整体稳定性和安全设计的批评。社区普遍认为 Rekordbox 极其难用，其特点是曲库管理充满 Bug、文档简陋，且经常出现阻碍专业 DJ 工作的兼容性问题。尽管该公司几乎垄断了俱乐部标准硬件市场，但用户经常将该软件描述为主要的痛点。许多 DJ 对更新感到恐惧，往往坚持使用旧版本，以防止活动期间出现曲库损坏或性能问题。评论者认为，AlphaTheta 优先考虑市场主导地位而非用户体验，导致了“体验恶化”（enshittification），尽管该软件在行业中发挥着关键作用，却遭到忽视。虽然该安全漏洞可能是早期架构设计不佳的副产品——即不设防的开放式网络访问被视为一种功能而非缺陷——但这再次体现了该平台被认为技术能力不足的现状。用户对这一漏洞表现得并不惊讶，反映出他们对开发商在安全或质量方面的承诺缺乏信心。

原文

August 8, 2026

Thank you for your continued support of AlphaTheta products.

We have identified a security vulnerability affecting the PRO DJ LINK function in rekordbox and certain CDJ/XDJ models.

This vulnerability could allow a third party who gains unauthorized access to a PRO DJ LINK network to view data stored on a Windows PC/Mac, or on USB/SD cards inserted into a CDJ/XDJ unit connected to that network.

To prevent misuse, we are withholding technical details until a fix has been made available.

Recommended precautions

We have not confirmed any cases of damage resulting from this vulnerability to date. That said, to help ensure you can continue using our products with confidence, we ask that you take the following precautions:

Update rekordbox (Ver. 7/Ver. 6, iOS/Android) to the latest version.
When using PRO DJ LINK, avoid using USB or SD cards that contain sensitive data.
If you connect your player to a Wi-Fi network, please use a secure, password-protected network.

Next steps

We are currently preparing a fix. Updates on our progress will be posted on this page as they become available.

PRO DJ LINK Vulnerability Response Status: https://support.alphatheta.com/en-US/articles/53214453591216
We remain committed to continuously improving the quality and security of our products so that you can use them with confidence.

We sincerely apologize for any inconvenience this may cause.

Latest firmware: here
Latest rekordbox Ver. 7: here
Latest rekordbox Ver. 6: here
Contact support: here