Meta Platforms WhatsApp Incorrect Authorization Vulnerability
Medium CVSS 5.4 Listed in CISA KEV
Summary
Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Meta Platforms:WhatsApp
- :
Sources
- CISA KEV DATABASE
- NVD DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2025-55177 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://www.whatsapp.com/security/advisories/2025/ reference
- https://www.facebook.com/security/advisories/cve-2025-55177 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-55177 US Government Resource
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV
- nvd_ingest NVD