CVE-2026-105674: Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB
TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media streaming service without valid user credentials.
Successful exploitation may allow an unauthenticated adjacent-network attacker to access and take over live video and audio streams, compromising the confidentiality and integrity of camera media.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker on the adjacent network can exploit it. The attacker does not need valid user credentials because the predictable pre-shared key can be recovered.
What access could an attacker gain?
Successful exploitation may let the attacker authenticate to the local media streaming service and access or take over live video and audio streams. This can compromise both the confidentiality and integrity of camera media.
Which device is identified as affected?
The affected product identified in the available data is the TP-Link Tapo C325WB V2.