The Indian government has issued a high-severity security alert for WhatsApp users on Windows. The warning comes from the Indian Computer Emergency Response Team (CERT-In), which has flagged a critical flaw in the WhatsApp Desktop application that could allow hackers to hijack systems and steal sensitive data.
What’s the Issue?
According to CERT-In, the vulnerability—identified as CVE-2025-3040—stems from a mismatch between MIME types and file extensions in WhatsApp’s attachment handling system. In simple terms, this flaw allows attackers to disguise malicious files as safe-looking documents, which when opened, can execute arbitrary code or even launch spoofing attacks.
This could potentially give cybercriminals unauthorized access to your personal data, or even full control over your computer.
Who Is Affected?
The vulnerability affects WhatsApp Desktop for Windows users who are running versions earlier than 2.2450.6.
If you’re using WhatsApp for:
- Chatting
- Voice or video calls
- Sharing files or media
on your Windows PC, you’re potentially at risk if you haven’t updated the app recently.
How Can Hackers Exploit It?
Attackers can craft malicious files and send them as attachments via WhatsApp. When these are opened in the vulnerable version of WhatsApp Desktop:
- Arbitrary code can run silently in the background
- The system can be spoofed or hijacked
- Sensitive data could be stolen or altered
What Should You Do Now?
To stay safe, update your WhatsApp Desktop app immediately.
Here’s how:
- Open Microsoft Store on your Windows PC and search for WhatsApp.
- Update to the latest version (2.2450.6 or newer).
- Alternatively, download the latest secure version from the official WhatsApp website.
- For full details, visit the official WhatsApp Security Advisories.
Why This Matters
With millions relying on WhatsApp for daily communication, any security lapse could lead to widespread breaches, including identity theft and financial fraud. It’s crucial that users act quickly to patch vulnerabilities and stay ahead of cyber threats.
