WhatsApp for Windows lets Python, PHP scripts execute with no warning
ID: 3de676e7-3ff3-5c19-9c20-dbea1d51717a
STIX ID: report--3de676e7-3ff3-5c19-9c20-dbea1d51717a
Feed Name: Bleeping Computer
Threat Score
A researcher discovered that WhatsApp for Windows allows certain script file types (.pyz, .pyzw, and .php) to be opened and executed directly from the client without appropriate warnings, enabling potential remote code execution if the recipient has Python or PHP installed; the issue was reproduced on Windows 11 and reported to Meta, which declined to treat it as a problem.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.