Twilio Authy
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Twilio Authy.
Known Exploited Twilio Authy Vulnerabilities
The following Twilio Authy vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| Twilio Authy Information Disclosure Vulnerability |
Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy. CVE-2024-39891 Exploit Probability: 17.1% |
July 23, 2024 |
The vulnerability CVE-2024-39891: Twilio Authy Information Disclosure Vulnerability is in the top 5% of the currently known exploitable vulnerabilities.
By the Year
In 2026 there have been 0 vulnerabilities in Twilio Authy. Authy did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 5.30 |
It may take a day or so for new Authy vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Twilio Authy Security Vulnerabilities
Authy API: Unauth Endpoint Exposes Phone # Data (Android <25.1.0 / iOS <26.1.0)
CVE-2024-39891
5.3 - Medium
- July 02, 2024
In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and responded with information about whether each phone number was registered with Authy. (Authy accounts were not compromised, however.)
Side Channel Attack
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Twilio Authy or by Twilio? Click the Watch button to subscribe.
