Local Access Vulnerability in goTenna v1 Devices by goTenna

CVE-2025-32886

What is CVE-2025-32886?

A local access vulnerability exists in goTenna v1 devices that permits unauthorized users to intercept and access sensitive data. This issue arises from the fact that all packets transmitted over RF are also sent over UART with USB Shell. Consequently, an individual with physical access to the device can exploit this flaw to gain insights into the communication protocol and compromise the confidentiality of transmitted information. Proper security measures and access controls are essential to mitigate such risks.

References