Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-54792— LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

Quick assessment

Affected
localsend localsend
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

LocalSend是LocalSend开源的一个 AirDrop 的开源跨平台替代方案。 LocalSend 1.16.1及之前版本存在安全漏洞，该漏洞源于发现协议存在中间人攻击漏洞，可能导致文件传输拦截和修改。

AI Predicted 7.5 Difficulty: Easy EPSS 0.26% · P16

Possible ATT&CK Techniques 1 AI

T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-54792

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception
Source: CVE Program / CVE List V5
Vulnerability Description
LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle (MitM) vulnerability in the software's discovery protocol allows an unauthenticated attacker on the same local network to impersonate legitimate devices, silently intercepting, reading, and modifying any file transfer. This can be used to steal sensitive data or inject malware, like ransomware, into files shared between trusted users. The attack is hardly detectable and easy to implement, posing a severe and immediate security risk. This issue was fixed in version 1.17.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
通道可被非端点访问(中间人攻击)
Source: CVE Program / CVE List V5
Vulnerability Title
LocalSend 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
LocalSend是LocalSend开源的一个 AirDrop 的开源跨平台替代方案。 LocalSend 1.16.1及之前版本存在安全漏洞，该漏洞源于发现协议存在中间人攻击漏洞，可能导致文件传输拦截和修改。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
localsend localsend <= 1.17.0 -

II. Public POCs for CVE-2025-54792

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-54792

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-54792 (1)

IV. Related Vulnerabilities

Same product: localsend
Same vendor: localsend
Same weakness: CWE-300

V. Comments for CVE-2025-54792

No comments yet

Leave a comment