AlphaTheta issues security warning to rekordbox and CDJ/XDJ users over PRO DJ LINK data risk

AlphaTheta, the parent company of Pioneer DJ, has disclosed a security vulnerability affecting the PRO DJ LINK function used across rekordbox and certain CDJ and XDJ models.

The company published the notice on August 8, explaining that the issue could potentially expose data when an unauthorized third party gains access to a PRO DJ LINK network. The feature allows compatible CDJ and XDJ units, as well as Mac and Windows computers running rekordbox, to communicate over an Ethernet connection.

According to AlphaTheta, someone who successfully accesses the network without authorization may be able to view information stored on a connected computer or on USB drives and SD cards inserted into CDJ or XDJ units.

AlphaTheta has not reported any confirmed damage related to the vulnerability. The company is also withholding additional technical details until a fix is available, likely to reduce the risk of the flaw being exploited before affected systems can be updated.

In the meantime, users are being advised to take several precautions. AlphaTheta recommends avoiding USB drives or SD cards containing sensitive information when using PRO DJ LINK, connecting equipment only through secure and password-protected Wi-Fi networks, and keeping rekordbox updated to the latest available version.

The warning is particularly relevant for DJs, clubs, festivals, and other environments where multiple devices may be connected through the same PRO DJ LINK network.

AlphaTheta has not yet provided further details on when a permanent fix will be released. Users of compatible CDJ and XDJ equipment are encouraged to follow the company's official security updates and apply any new rekordbox or firmware updates as they become available.