CVE-2025-30401

CVE-2025-30401 is a spoofing vulnerability in WhatsApp for Windows versions prior to 2.2450.6. This flaw allowed attackers to craft malicious attachments that appeared benign based on their MIME type but would execute arbitrary code when manually opened by the recipient due to a mismatch with the filename extension. The vulnerability has a CVSS score of 6.7 (MEDIUM), indicating a network-based attack requiring high attack complexity and user interaction, with potential for high impact on confidentiality and integrity. While there is no evidence of in-the-wild exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness within the cybersecurity community.