Is CVE-2018-25361 actively exploited?

No active exploitation of CVE-2018-25361 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2018-25361 be exploited remotely?

No. CVE-2018-25361 requires local access to exploit.

What is the CVSS score of CVE-2018-25361?

CVE-2018-25361 has a CVSS score of 6.8 (MEDIUM).

HOME VULNERABILITIESCVE-2018-25361

MEDIUM

CVE-2018-25361

CWE-290Published: May 25, 2026· Updated: May 26, 2026

6.8

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.2th

Official Description

Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a constant encryption key. Attackers can inject malicious database records into the application's database files to unlock the client and access all stored data, chats, images, and files without knowing the original passcode.

NVD Source

Technical Analysis

CVE-2018-25361 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.8.