CVE-2025-56557
Critical · CVSS 9.1Tuya Smart Life App — Unprivileged Matter Device Control (Excessive Privilege / CWE-250)
- CVSS
- 9.1
- nvd
- EPSS
- —
- KEV
- No
- Class
- other
- CWE-250
Description
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.
Search profile — drives PoC discovery
Symbols MatterMatter protocolMatter fabricTuya Matter fabricSmart Life Appfabric bugMatter commissionerMatter controllerunprivileged control
Keywords CVE-2025-56557Tuya Smart Life App MatterTuya Matter fabric bugTuya Matter unprivileged controlTuya Matter protocol vulnerabilitySmart Life App 5.6.1 MatterTuya Matter device control exploitTuya Matter PoC
Versions: 5.6.1
Ranked PoCs (1) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0fkie-cad/nvd-json-data-feeds needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z