CVE-2025-67229

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2026-01-23

Last modified

2026-01-23

Weaknesses

CWE-295

Affected products

• Builder (Todesktop)

References

• https://www.todesktop.com/changelog
• https://www.todesktop.com/security/advisories/TDSA-2025-001