WhatsApp bug lets you view messages multiple times in one view

WhatsApp’s messaging method, which lets you send videos, images and texts in one view, has a bug that could even allow others to save that content. The complaint comes from cybersecurity researcher Tal Be’ery, who detailed his findings on his blog.

According to the expert, single view mode can be easily skipped – used to send more intimate or confidential content, ending all the privacy promised by the function.

There is a fault only on WhatsApp Web version For browsers on PC. The researcher himself recorded a video showing the bug being exploited in real time. Check out the recording below:

The vulnerability report warns: Anyone can extract the URL of content that should only be viewed once and without the possibility of taking screenshots. Usage Extensions for browsers or clients built based on the WhatsApp API can be used to compromise message security.

The security of this style of communication appears to be basic and involves only a single instruction. Changing the code from “view once” to “false” will already make an image available on the WhatsApp server to be viewed multiple times.

Those exploiting the flaw can even save the files to their computers, something that is not possible on WhatsApp for mobile devices as it displays a message that the content is private and “self-destructs” once viewed.

Meta is already working on a fix

Be’ery reported the vulnerability to the messenger’s owner, Meta, at the end of August 2024. He was not the first person to notice the problem and report it to the company. — Techniques to bypass the mod’s security or warnings about similar breaches have been floating around for at least a year.

In a statement sent to the website TechCrunchWhatsApp confirmed this”is in the process of rolling out updates“to fix a bug in the web version. The company also emphasizes that a single-view method should be used”only with people you know and trust“.