The Indian Computer Emergency Response Team (CERT-In) has issued a high-risk warning for WhatsApp Desktop users on Windows. The advisory highlights a serious security flaw in older versions of the app, specifically those released before version 2.2450.6. The vulnerability could allow cybercriminals to access data, steal information, or run harmful code on affected systems.

WhatsApp Desktop flaw explained

CERT-In said that the vulnerability exists due to misconfiguration between the MIME type and file extension, leading to improper handling of attachment openings. An attacker could exploit this vulnerability by crafting malicious attachment which could execute arbitrary code when opened manually within WhatsApp. 

Who is at risk?

The vulnerability affects users who are still using WhatsApp Desktop versions earlier than 2.2450.6. CERT-In has strongly advised users to update their application as soon as possible. The agency also warned users to be careful when opening any attachments, especially those from unfamiliar sources or with suspicious names or file formats.

Tips to stay secure on WhatsApp Desktop

To help users avoid falling prey to this vulnerability, CERT-In has issued the following safety measures:

Update the app: Make sure your WhatsApp Desktop version is 2.2450.6 or newer.
Avoid risky files: Refrain from opening attachments from unknown or suspicious sources.
Keep your system secure: Regularly update your operating system and antivirus software to defend against threats.