CVE-2025-66555

Description

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device in real-time without user interaction, resulting in full remote input control.

PUBLISHED Reserved 2025-12-04 | Published 2025-12-04 | Updated 2025-12-05 | Assigner VulnCheck

Problem types

CWE-306: Missing Authentication for Critical Function

Product status

Credits

Chokri Hammedi finder

References

www.exploit-db.com/exploits/52333 (Exploit Database Entry 52333) exploit

airkeyboardapp.com (AirKeyboard Homepage) vendor-advisory product

apps.apple.com/us/app/air-keyboard/id6463187929 (Apple App Store Link) product

www.vulncheck.com/...oard-ios-app-105-remote-input-injection third-party-advisory

cve.org (CVE-2025-66555)

nvd.nist.gov (CVE-2025-66555)