PT-2025-33677
CVE-2025-55293
·
Published
2025-08-18
·
Updated
2025-10-17
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Meshtastic versions prior to 2.6.3
Description:
Meshtastic is a mesh networking solution. An attacker can send
NodeInfo with an empty publicKey to bypass size checks, clearing the existing public key. Subsequently, a new key can be sent and stored in NodeDB, overwriting the legitimate key.Recommendations:
Update to version 2.6.3.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾