CVE-2025-55293

CVE-2025-55293 is a critical vulnerability affecting Meshtastic firmware prior to version 2.6.3. This flaw allows an unauthenticated attacker to overwrite the public key of a known node by first sending an empty key, then a malicious one, enabling impersonation and message tampering. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion, indicating awareness within security circles.