CVE-2025-52464

The problem results from two related flaws: first, flashing processors used by hardware manufacturers duplicated identical key pairs across multiple devices; second, the firmware software did not properly initialize the internal entropy pool (randomness) on some platforms, leading to the generation of low-entropy keys (CWE-331 — insufficient entropy). An attacker who compiles a list of known compromised keys can intercept encrypted direct messages sent by users possessing vulnerable key pairs and then decrypt them.

An attacker is able to decrypt private direct messages transmitted by devices with vulnerable keys, which means complete compromise of communication confidentiality. In case of key compromise at the system level, limited impact on integrity and availability of dependent systems is also possible.

Update firmware to version 2.6.11, which delays key generation until the first LoRa region setting and warns the user of detected compromised keys. Version 2.6.12 extends the fix by automatically removing known compromised keys upon detection. As a workaround, a complete device wipe is recommended to remove keys cloned by the manufacturer.

Meshtastic Firmware versions from 2.5.0 to before 2.6.11, particularly devices whose keys were generated during the flashing procedure by hardware manufacturers using duplicated keys or platforms with improper randomness pool initialization.