WhatsApp HACKED: CERT-In Issues High-Severity Warning for WhatsApp Desktop Users on Windows

The Indian Computer Emergency Response Team (CERT-In) has released a high-severity security alert impacting WhatsApp Desktop customers on Windows. The agency advises that recently disclosed vulnerability can make it possible for attackers to run arbitrary code or conduct spoofing attacks, with potential consequences to user data and system integrity.

Devices Affected

The security bug impacts users of WhatsApp Desktop on Windows versions below 2.2450.6. The vulnerability, identified as CVE-2025-30401, is a result of misconfiguring the file's MIME type and its extension. Remote attackers could run malicious code or spoof the system by exploiting mishandled attachments when a malicious file is opened via WhatsApp.

CERT-In has classified the vulnerability as "high" severity since it can provide unauthorized access to sensitive information or even total control over an individual's computer. As a large number of people and experts use WhatsApp Desktop for messaging, voice/video calls, and media sharing, the threat has universal implications.

Also Read: iQOO Launches Z10 5G and Z10x 5G in India With Massive Batteries: Price, Specifications

What the Government Has Said

The official advisory by CERT-In states the possible effect of this vulnerability. It informs that cyber attackers might remotely exploit the bug by sending a specially designed attachment via WhatsApp. If the user manually opens this file within the app, it may trigger the vulnerability, and hackers might steal data or take over the device.

CERT-In has underscored that this is a stark demonstration of how apparently trivial software misconfigurations can result in serious cybersecurity threats. The agency has recommended that all users pay serious heed to the warning, particularly considering the prevalence of WhatsApp both within and outside professional circles. 

What You Should Do Now

If you are running WhatsApp Desktop on Windows, it is highly recommended that you go check your version right away and upgrade to the latest build — version 2.2450.6 or later — so that you will be safe. WhatsApp has already published a patch to fix this vulnerability and has documented the fix in its official security advisory, which can be found at WhatsApp Security Advisories.

Aside from running the application update, users must practice safe digital behavior:

• Don't open unsolicited attachments, even if they seem to be from known contacts.
• Keep an eye out for and apply software updates regularly.
• Keep antivirus and anti-malware software current.
• Exercise caution when receiving new file types or formats.

If you remain vigilant and keep your software current, you can minimize your risk of being a victim of such exploits.

Also Read: Motorola Edge 60 Pro 5G Expected to Launch Soon in India: Here’s What to Expect