Critical Meshtastic Flaw Allows Attackers to Decrypt Private Messages

A severe cryptographic vulnerability in the popular open-source Meshtastic project allows attackers to decrypt private messages and hijack nodes across LoRa mesh networks.

The vulnerability tracked as CVE-2025-52464 stems from duplicated encryption keys and insufficient randomness during key generation.

The issue affects multiple hardware platforms and poses significant risks to users relying on Meshtastic for secure off-grid communication in scenarios like emergency response and remote expeditions.

To read the complete article see: here