Data Deletion Flaw in Wire's Messaging Web App Impacts User Privacy

CVE-2025-48066

What is CVE-2025-48066?

The wire-webapp, part of the open-source messaging service Wire, contains a data deletion flaw that arises from a regression introduced during a bug fix. The application fails to properly delete local data upon user logout. This is particularly problematic for devices marked as public computers, as well as standard user accounts attempting to erase personal information and conversations. While access to the local machine is necessary to retrieve such data, it raises significant privacy concerns. To mitigate the issues posed by previous versions, users are advised to manually delete the local database after using the affected functionality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References