WhatsApp Users in India: Check Now! Govt Issues Critical Security Warning

WhatsApp security warning: CERT-In releases critical WhatsApp warning about WhatsApp Desktop vulnerabilities on Windows platforms. The agency's warning states that attackers might use this vulnerability to execute arbitrary code or initiate spoofing attacks thereby risking system security.

Devices affected

WhatsApp Desktop for Windows users operating versions prior to 2.2450.6 encounter this vulnerability. A misconfiguration between the MIME type and file extension results in improper attachment handling according to CERT-In. The flaw enables attackers to execute arbitrary code or spoof the system when a user opens a malicious file sent through WhatsApp.

CERT-In warning has designated this vulnerability as “high” severity because attackers could gain unauthorized data access or complete control over the vulnerable machine. Desktop users of WhatsApp who depend on the application for messaging and media sharing are affected by this security flaw identified as CVE-2025-30401.

What government has said

The advisory alerts users to potential risks of data theft, spoofing attacks or total system control as a result of the vulnerability. A government agency reported that remote attackers could activate this vulnerability by sending specially designed attachments which trigger the flaw when users manually open them in WhatsApp.

CERT-In’s announcement details the extensive dangers presented by software misconfigurations and calls for urgent attention from users due to WhatsApp's extensive use for both work and personal exchanges.

What you should do right now

WhatsApp Desktop users must check their current software version and apply the latest update to fix the vulnerability. WhatsApp published a WhatsApp security issues advisory about their latest fix on their official website at https://www.whatsapp.com/security/advisories/2025.

Users must WhatsApp update their software while avoiding unsolicited attachments from known contacts and should regularly check for new updates. Practicing proper cybersecurity hygiene will decrease the likelihood of future exploits.