CVE-2025-52883

Meshtastic-Android prior to version 2.5.21 is vulnerable: an attacker can send an unencrypted direct message impersonating another node, which is displayed in the victim’s chat as PKC-secured due to a forged green padlock. The victim may trust and read the attacker’s message as legitimate. Versio...