Soroush IM Desktop App 0.17.0 allows a local attacker to bypass authentication by injecting pre‑encrypted database entries generated with a constant encryption key. This flaw lets the attacker create malicious records in the application’s database files, effectively removing the user’s passcode and unlocking the client. Once unlocked, the attacker has unrestricted access to all stored data, including chats, images, and files, compromising confidentiality and potentially the integrity of the entire data set. The vulnerability is limited to local access, but any user who can execute code on the compromised machine can exploit it.

The vulnerability affects the Soroush Messenger desktop application, version 0.17.0, as distributed by the vendor Soroush. No other product or version is indicated as impacted.

The CVSS score of 7 indicates a high severity vulnerability. EPSS data is not available, and the issue is not listed in CISA’s KEV catalog, suggesting no currently known active exploit campaigns. The attack vector is local, requiring the attacker to have physical or administrative access to the target machine, but once accessed the weakness confers full control over the application’s data.