Medium severity6.8NVD Advisory· Published May 25, 2026· Updated May 26, 2026
CVE-2018-25361
CVE-2018-25361
Description
Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a constant encryption key. Attackers can inject malicious database records into the application's database files to unlock the client and access all stored data, chats, images, and files without knowing the original passcode.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: =0.17.0
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.