Security Vulnerability in Raspberry Pi Imager for Windows
CVE-2025-60892
Currently unrated
What is CVE-2025-60892?
A vulnerability in Raspberry Pi Imager version 1.9.6 for Windows exposes users to security risks related to its OS customization feature. The application improperly handles the 'public-key authentication' setting, which causes it to erroneously restore a user's ssh public key (id_rsa.pub) to the authorized_keys file on the Raspberry Pi, despite explicit removal attempts from the user interface. This flaw can potentially enable an attacker to log into the device using unintended access without the user's consent.