CVE-2025-54792

CVE-2025-54792 is a critical Man-in-the-Middle (MitM) vulnerability affecting LocalSend versions 1.16.1 and below, an open-source file sharing application. An unauthenticated attacker on the same local network can exploit this flaw to impersonate legitimate devices, silently intercepting, reading, and modifying file transfers. This vulnerability carries a CVSS score of 6.8 (Medium) due to its adjacent attack vector, high impact on confidentiality and integrity, and low attack complexity. While there is no known active exploitation, public exploit code, or significant community discussion, the ease of implementation and severe potential for data theft or malware injection pose an immediate security risk.