GHSA-mmg6-j6rr-w793
GitHub Security Advisory
⚠ Unreviewed
LOW
Has CVE
Advisory Details
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.
Related CVEs
Key Information
2.5
/10
Dataset
Last updated: November 23, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.