Server Certificate Validation Flaw in Altium Designer by Altium

CVE-2025-27377

What is CVE-2025-27377?

Altium Designer version 24.9.0 contains a vulnerability related to the lack of validation for self-signed server certificates during cloud connections. This oversight enables attackers to conduct man-in-the-middle (MITM) attacks, where they can intercept or manipulate communication between the client and server. As a result, sensitive information such as authentication credentials and proprietary design data may be exposed to unauthorized entities, posing a significant risk to users relying on secure cloud interactions.

References