A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2025-55177

Meta Platforms WhatsApp Incorrect Authorization Vulnerability

Published
2025-09-02
Modified
2026-07-31
Sources
cisa-kev

Summary

Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.