CVE-2025-56139

Impact

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different URL, which can be malicious. This UI misrepresentation enables attackers to deceive users by displaying trusted previews for harmful links, facilitating phishing attacks and user confusion.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://hdhrmi.blogspot.com/2025/07/aiman-al-hadhrami-linkedin-vulnerability.html
• https://hdhrmi.blogspot.com/2025/09/link-preview-mismatch-cve-2025-56139.html