CyberSecBulletin

Hikariatama vulnerabilities

We track 2 vulnerabilities in Hikariatama products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2025.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Hikariatama vulnerabilities

  • 10.0 Critical severity

    Hikka: Improper Authentication

    CVE-2025-52572Hikariatama

    Hikka, a Telegram userbot, has vulnerability affects all users on all versions of Hikka. Two scenarios are possible. 1. Web interface does not have an authenticated session: attacker can use his own Telegram account to gain RCE to the server by authorizing in

  • 9.6 Critical severity

    Hikka: Improper Authentication

    CVE-2025-52571Hikariatama

    Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patche