Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-27377 EUVD-2026-4175GHSA-xfvg-p8x9-f25q

Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks

Published Jan 22, 2026 · Updated Jan 22, 2026 · Assigned by Altium

Description

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle (MITM) attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensitive design data.

Affected products

VendorProductAffectedFixed
Altium Altium Designer 24.9 – ≤ 25.1 —

References