CVE-2025-67229

← CVEs

CRIT 9.8

Published

2026-01-23

Last Modified

2026-01-29

Affected Apps

Affected Devices

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.

Affected Applications in Environment 12

Desktop v4.67.0 (4.67.0.5)

2 devices

Desktop v4.41.2 (4.41.2.20)

2 devices

Desktop v4.62.0 (4.62.0.11)

2 devices

Desktop v4.63.0 (4.63.0.11)

3 devices

Desktop v4.66.0 (4.66.0.6)

4 devices

Desktop v4.64.0 (4.64.0.4)

3 devices

Desktop v4.53.0 (4.52.0.4)

1 device

Desktop v4.65.0 (4.65.0.4)

4 devices

Desktop v4.50.0 (4.50.0.5)

1 device

Desktop v4.66.1 (4.66.1.8)

3 devices

Desktop v4.61.0 (4.61.0.14)

1 device

Desktop v4.49.0 (4.49.0.17)

1 device

Affected Devices 16

Dallins-MacBook-Pro-2.local Mac F-16 Mac RobertsMacbookPro.local Mac Zhiyuns-MacBook-Pro.local Mac a00288946-F6VM65M2H3 Mac a00295943-YF4WY76Q4D Mac a00957369-K6KVHY00C5 Mac a01513577-M7GJNF6XQR Mac a01841079-LK4T0Y7FP4 Mac a01875599-TY6TF9Y69L Mac a02273884-FYQGVQ1TFP Mac a02490072-PCVFY9PJV6 Mac adamthomas-H73N967GM2 Mac admin.integrations's iMac -H12CRHNTJV40 Mac ah-mbp.lan Mac ken-mpb16-LG9VYFY7QD Mac

References 2