CVE-2025-5098CWE-200CWE-313

KL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure

Critical · published May 23, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
23.0
In the wild
Unconfirmed
What it is

🚨 A clever exploit in the PrinterShare Android app lets attackers snatch your Gmail authentication tokens like a thief grabbing your keys from the kitchen counter! 🔥 Think of it like leaving your car keys in a public place. If someone picks them up, they could easily drive off with your car — that's how easily attackers can misuse those tokens to access your Gmail account without you knowing. This vulnerability could lead to an attacker accessing your private emails, reading sensitive information, and even sending messages on your behalf. The consequences are absolutely devastating, as it compromises your personal data and privacy—imagine all your private conversations laid bare!

Put simply

Think of it like leaving your car keys in a public place. If someone picks them up, they could easily drive off with your car — that's how easily attackers can misuse those tokens to access your Gmail account without you knowing. The PrinterShare Android application fails to properly secure Gmail authentication tokens, allowing attackers to capture and reuse them, effectively bypassing authorization checks. This means they can access a user's Gmail account without any additional validation.

What to do

This vulnerability could lead to an attacker accessing your private emails, reading sensitive information, and even sending messages on your behalf. The consequences are absolutely devastating, as it compromises your personal data and privacy—imagine all your private conversations laid bare! Update the PrinterShare app to the latest version immediately to patch this vulnerability. Additionally, review your account's security settings and consider revoking access to any suspicious apps. It’s also a good idea to change your Gmail password as a precaution! You’ve got this! Stay vigilant, and follow these steps to keep your Gmail safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00313 · 23.0th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-313 · Cleartext Storage in a File or on Disk
Published
2025-05-23T01:06Z
EPSS history
Timeline
  • 23 MAY 01:06Z
    KL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure
    cvelistv5