CVE-2018-25361

Deferred Deferred - Pending Action

Authentication Bypass in Soroush IM Desktop App

Publication date: 2026-05-25

Last updated on: 2026-05-25

Assigner: VulnCheck

Description

Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a constant encryption key. Attackers can inject malicious database records into the application's database files to unlock the client and access all stored data, chats, images, and files without knowing the original passcode.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-25

Last Modified

2026-05-25

Generated

2026-07-06

AI Q&A

2026-05-26

EPSS Evaluated

2026-07-04

NVD

CVE-2018-25361

EUVD

EUVD-2018-21883

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-290	This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

Executive Summary

The vulnerability in Soroush IM Desktop App 0.17.0 is an authentication bypass that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a constant encryption key.

Attackers can insert malicious database records into the application's database files, which unlocks the client and grants access to all stored data, including chats, images, and files, without needing to know the original passcode.

Impact Analysis

This vulnerability can allow an attacker with local access to bypass authentication and gain unauthorized access to all stored data within the Soroush IM Desktop App.

Access to private chats
Access to stored images
Access to files saved in the application

This could lead to a significant breach of privacy and data confidentiality.

Hi! I’m here to help you understand CVE-2018-25361. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70