CVE-2025-67229

Critical

Published: 23/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An improper certificate validation vulnerability in ToDesktop Builder v0.32.1 allows an unauthenticated on-path attacker to spoof backend responses by exploiting insufficient certificate validation.

Risk Assessment

An attacker can intercept and modify communication between the app and backend, potentially leading to code injection or data theft.

Recommendation

Update ToDesktop Builder to a patched version and ensure the application properly validates TLS certificates.

Original NVD description (English source)

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.