By There is currently a ravaging vulnerability that puts users of WhatsApp on critical risks of their sensitive data.
Warnings from the National Information Technology Development Agency (NITDA) identified the critical spoofing vulnerability, as CVE-2025-30401, and was discovered in WhatsApp for
Windows.
NITDA’s investigations indicated that the flaw arises from how the application handles file attachments adding that WhatsApp uses Multipurpose Internet Mail Extensions (MIME) types to identify the format of media files sent through the app.
“This helps the app determine how to handle and display the media, whether it’s an image, audio, video, or document. Attackers take advantage of this process by crafting malicious files with misleading MIME types, thereby tricking users into unintentionally executing malicious code”, said NITDA.
According to the cybersecurity report from NITDA, the impact is such that exploitation of this vulnerability could allow attackers to execute malicious code on affected devices, leading to unauthorized access, data theft, or further system compromise.
To present the risk, NITDA suggested an upgrade WhatsApp for Windows to version 2.2450.6 or later via the official WhatsApp website or Microsoft Store.
It also warned that users should not open unexpected or suspicious files received over WhatsApp.
