bad security

[a9eelsh]

What happened?

My number was used to send messages.

Reproduction Steps

bad security

Relevant log output

No response

Screenshots or Additional Context

No response

Application Version

4.22.1

Verification

• I have checked for existing closed issues and discussions.

[aldinokemal]

you have to elaborate technical detail @a9eelsh about this

[a9eelsh]

you have to elaborate technical detail @a9eelsh about this

I have two WhatsApp numbers, one linked to your system and the other not.

I was surprised a little while ago when I entered WhatsApp to find two messages sent from my number. For your information, I installed the system on my home server, but I do not know how it happened and was sent or what exactly happened. For your information, I have many systems on my home server and nothing happened except through the WhatsApp service

[aldinokemal]

That doesn't seem to be the root cause of the app issue. I don't think it's a security bug unless many people report it. Since this is open source, you can check out the source code yourself.

Just a piece of advice: if you decide to use this, make sure to hardening your own server.

[zsubzwary]

Guys, I am also facing the same issue, someone is hunting for these servers online, and messages from my number have been sent all over the world to many users.

What should I do ?? (like how do I implement auth on this ?)

Following are the screenshots of this happening:

[zsubzwary]

@aldinokemal ?

[aldinokemal]

wdyw from me bro?

[zsubzwary]

Trying to inform you that Something is really off.
Even after the basic auth, these messages were still being sent.

[aldinokemal]

just remove your wa account and use official api
this is suggesting from me

[Jurager]

Trying to inform you that Something is really off.

Even after the basic auth, these messages were still being sent.

You enabled basic auth after session was "stolen", so what is the problem, need to logout first