CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle (MitM) vulnerability in the software's discovery protocol allows an unauthenticated attacker on the same local network to impersonate legitimate devices, silently intercepting, reading, and modifying any file transfer. This can be used to steal sensitive data or inject malware, like ransomware, into files shared between trusted users. The attack is hardly detectable and easy to implement, posing a severe and immediate security risk. This issue was fixed in version 1.17.0.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 5.2

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/localsend/localsend/commit/e8635204ec782ded45bc7d698deb60f3c4105687	Patch
https://github.com/localsend/localsend/releases/tag/v1.17.0	Release Notes
https://github.com/localsend/localsend/security/advisories/GHSA-424h-5f6m-x63f	Exploit Vendor Advisory
https://github.com/localsend/localsend/security/advisories/GHSA-424h-5f6m-x63f	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:localsend:localsend:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-08-01 23:15

Updated : 2025-09-03 14:12

NVD link : CVE-2025-54792

Mitre link : CVE-2025-54792

CVE.ORG link : CVE-2025-54792

JSON object : View

Products Affected

localsend

localsend

CWE

CWE-300

Channel Accessible by Non-Endpoint

CWE-345

Insufficient Verification of Data Authenticity

{"id": "CVE-2025-54792", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.6}], "cvssMetricV40": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-08-01T23:15:25.143", "references": [{"url": "https://github.com/localsend/localsend/commit/e8635204ec782ded45bc7d698deb60f3c4105687", "tags": ["Patch"], "source": "[email protected]"}, {"url": "https://github.com/localsend/localsend/releases/tag/v1.17.0", "tags": ["Release Notes"], "source": "[email protected]"}, {"url": "https://github.com/localsend/localsend/security/advisories/GHSA-424h-5f6m-x63f", "tags": ["Exploit", "Vendor Advisory"], "source": "[email protected]"}, {"url": "https://github.com/localsend/localsend/security/advisories/GHSA-424h-5f6m-x63f", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-300"}, {"lang": "en", "value": "CWE-345"}]}], "descriptions": [{"lang": "en", "value": "LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle (MitM) vulnerability in the software's discovery protocol allows an unauthenticated attacker on the same local network to impersonate legitimate devices, silently intercepting, reading, and modifying any file transfer. This can be used to steal sensitive data or inject malware, like ransomware, into files shared between trusted users. The attack is hardly detectable and easy to implement, posing a severe and immediate security risk. This issue was fixed in version 1.17.0."}, {"lang": "es", "value": "LocalSend es una aplicaci\u00f3n de c\u00f3digo abierto que permite compartir archivos y mensajes de forma segura con dispositivos cercanos a trav\u00e9s de redes locales sin necesidad de conexi\u00f3n a internet. En las versiones 1.16.1 y anteriores, una vulnerabilidad cr\u00edtica de Man-in-the-Middle (MitM) en el protocolo de descubrimiento del software permite a un atacante no autenticado en la misma red local suplantar la identidad de dispositivos leg\u00edtimos, interceptando, leyendo y modificando silenciosamente cualquier transferencia de archivos. Esto puede utilizarse para robar datos confidenciales o inyectar malware, como ransomware, en archivos compartidos entre usuarios de confianza. El ataque es dif\u00edcilmente detectable y f\u00e1cil de implementar, lo que supone un riesgo de seguridad grave e inmediato. Este problema se solucion\u00f3 en la versi\u00f3n 1.17.0."}], "lastModified": "2025-09-03T14:12:26.090", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:localsend:localsend:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99B665EA-3DCE-4331-ACFE-C4A38FCF8D1B", "versionEndExcluding": "1.17.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}