PT-2025-15063 · Facebook · Whatsapp For Windows+1

Published 2025-04-05 · Updated 2026-01-15 · CVE-2025-30401

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions WhatsApp versions prior to 2.2450.6

Description A spoofing issue in WhatsApp for Windows allows attackers to disguise malicious files as harmless attachments, potentially leading to remote code execution when opened. The vulnerability is related to how the app handles file attachments, displaying them according to their MIME type but selecting the file opening handler based on the attachment's filename extension. A maliciously crafted mismatch could cause the recipient to inadvertently execute arbitrary code rather than view the attachment. There is no evidence of exploitation in the wild.

Recommendations Update WhatsApp to version 2.2450.6 or later to mitigate the risk of this vulnerability. As a temporary workaround, consider avoiding opening attachments from unknown sources and being cautious when interacting with files sent through WhatsApp. Restrict access to the vulnerable file handling module to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-04971

CVE-2025-30401

Affected Products

Facebook Whatsapp Desktop

Whatsapp For Windows

References · 104

• https://bdu.fstec.ru/vul/2025-04971 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30401 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30401 · Security Note
• https://twitter.com/CVEnew/status/1908663644453560465 · Twitter Post
• https://twitter.com/chengrob/status/1910013279742701579 · Twitter Post
• https://twitter.com/Cybersecur39101/status/1910224565160017997 · Twitter Post
• https://twitter.com/CipherGuardians/status/1910085548250976540 · Twitter Post
• https://twitter.com/syedaquib77/status/1910003903963226508 · Twitter Post
• https://twitter.com/kingops3c/status/1910226920215621811 · Twitter Post
• https://twitter.com/fletch_ai/status/1909894164961198165 · Twitter Post
• https://twitter.com/DarkWebInformer/status/1909677916780196103 · Twitter Post
• https://whatsapp.com/security/advisories/2025 · Note
• https://reddit.com/r/whatsapp/comments/1jsm0l6/whatsapp_for_windows_vulnerability · Reddit Post
• https://twitter.com/SmashingApps/status/1910218302355370473 · Twitter Post
• https://twitter.com/Mvnaaa___/status/1915748865082269962 · Twitter Post