PT-2025-35827 · Linkedin · Linkedin Mobile Application For Android

Aiman Al Hadhrami · Published 2025-09-03 · Updated 2025-09-08 · CVE-2025-56139

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions LinkedIn Mobile Application for Android version 4.1.1087.2

Description The LinkedIn Mobile Application for Android version 4.1.1087.2 does not update link preview metadata (image, title, description) when a user replaces the original URL in a post or comment before publishing. This results in the display of stale preview information while the link directs to a different URL, potentially malicious. This UI misrepresentation can be used to deceive users with trusted previews for harmful links, enabling phishing attacks and causing user confusion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-449

Related Identifiers

CVE-2025-56139

Affected Products

Linkedin Mobile Application For Android

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-56139 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56139 · Vendor Advisory
• https://hdhrmi.blogspot.com/2025/07/aiman-al-hadhrami-linkedin-vulnerability.html · Note
• https://t.me/cveNotify/134244 · Telegram Post
• https://t.me/cveNotify/134677 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1963400204675096676 · Twitter Post
• https://t.me/CVEtracker/31633 · Telegram Post
• https://twitter.com/CVEnew/status/1963322550064132439 · Twitter Post
• https://hdhrmi.blogspot.com/2025/09/link-preview-mismatch-cve-2025-56139.html · Note