AlphaTheta announced a security vulnerability in its PRO DJ LINK system that could expose data on Windows PCs, Macs and removable media attached to compatible CDJ/XDJ gear. The company said the flaw might let an unauthorized party on the same network view files stored on a computer or on USB and SD cards linked to the equipment.
The report, first detailed by music news site We Rave You, notes that AlphaTheta has not confirmed any incidents of damage. The firm is urging users to install the latest rekordbox updates, avoid using removable media with sensitive information on PRO DJ LINK, and connect devices over a password‑protected Wi‑Fi network.
Technical insight from the Instagram account Triodeofficial, run by Chris L, explained that the issue stems from the NFS server used for file transfers. Under certain network conditions, the server could be tricked into serving files beyond the intended music library, potentially exposing personal files on computers and data on USB drives.
AlphaTheta’s response document lists several affected models, including the CDJ‑3000X, CDJ‑3000, CDJ‑2000NXS2, CDJ‑1500X, CDJ‑900NXS, XDJ‑1000MK2, XDJ‑700, XDJ‑AZ, XDJ‑AZ‑N and XDJ‑XZ. Partial fixes are available in rekordbox versions 7.2.17 and 6.8.7, while iOS and Android apps remain vulnerable pending updates. Full technical details have not been released, but further patches are expected.
For more information, visit weraveyou.com.