CVE-2025-47729: TeleMessage TM SGNL Hidden Functionality Vulnerability

Q: How do I fix CVE-2025-47729?

text message archiver: upgrade to newer than 2025-05-05. Exact commands for each OS are on this page.

Q: Is CVE-2025-47729 being exploited?

Yes. CVE-2025-47729 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.

Q: What does CVE-2025-47729 affect?

CVE-2025-47729 affects text message archiver. Severity is low (CVSS 1.9). The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile p

Q: How urgent is CVE-2025-47729?

Priority 41/100. Exploited in the wild (CISA KEV)

Patch now

LOW 1.9EXPLOITEDUPGRADE

CVE-2025-47729 is a low-severity flaw (CVSS 1.9) affecting text message archiver, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Why this priority

Exploited in the wild (CISA KEV)

A fixed release or distro patch exists.

Risk facts

CVSS score	1.9 (Low)
Attack vector	Local
Attack complexity	High
Privileges needed	High
User interaction	None
EPSS exploit chance	0.4% (top 61%)
CISA exploited list	Yes, fix due 2025-06-02
Weakness	CWE-912
Published	2025-05-08
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: telemessage

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-05-08 14:15 UTCPublished CVE record published
2025-05-12Exploited Added to the CISA Known Exploited Vulnerabilities list
2025-06-02Deadline CISA due date for US federal agencies to patch
2026-06-17 09:28 UTCUpdated Record last modified

telemessage text message archiver UPGRADE

Affected: <= 2025-05-05

Fixed in: newer than 2025-05-05

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy text-message-archiver || rpm -q text-message-archiver || text-message-archiver --version

2. UPGRADE to newer than 2025-05-05 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade text-message-archiver

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade text-message-archiver

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · CISA KEV catalog · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-47729?

text message archiver: upgrade to newer than 2025-05-05. Exact commands for each OS are on this page.

Is CVE-2025-47729 being exploited?

Yes. CVE-2025-47729 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.

What does CVE-2025-47729 affect?

CVE-2025-47729 affects text message archiver. Severity is low (CVSS 1.9). The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile p

How urgent is CVE-2025-47729?

Priority 41/100. Exploited in the wild (CISA KEV)

References

← Back to latest CVEs