CVE-2025-67229

Critical · 9.8

CVSS

9.8

EPSS

0.3%

Published

Jan 23, 2026

CISA due date

—

The record

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.

Affected packages

Ecosystem	Package	Introduced	Fixed