TeleMessage security is under fire after U.S. authorities confirmed a flaw in the messaging app that hackers have already exploited. The Cybersecurity and Infrastructure Security Agency (CISA) has now added the vulnerability—CVE-2025-47729—to its Known Exploited Vulnerabilities (KEV) catalog.
The app was recently used by former national security adviser Mike Waltz, whose brief tenure saw multiple messaging-related missteps. One high-profile incident, nicknamed Signalgate, happened when Waltz mistakenly added a journalist to a Signal group chat with senior military officials. That group was reportedly discussing a confidential operation in Yemen.
Not long after, Waltz was spotted using TeleMessage’s Signal-based app, known as TM SGNL. This triggered more concern, especially after hackers claimed they had breached the platform.
TeleMessage, owned by U.S.-based Smarsh, archives messages from apps like Signal, WhatsApp, Telegram, and WeChat. But it turns out that many of those archived chats were not properly encrypted. According to researchers, attackers were able to access message logs stored on the company’s servers—including content from users at Coinbase and U.S. Customs and Border Protection.
Cybersecurity researcher Micah Lee reviewed the TM SGNL source code and found that the company’s end-to-end encryption claims weren’t accurate. While messages between users were encrypted, the path from the app to the archive storage was not. That left chat logs exposed and available in plaintext.
Smarsh has since shut down all TeleMessage services temporarily as it investigates the breach. In the meantime, CISA has recommended that organizations stop using the platform entirely.
Because CVE-2025-47729 is a server-side vulnerability, there’s little users can do to protect their data—aside from leaving the service. Federal agencies have 21 days to respond and secure systems when a threat appears on the KEV list.
For now, CISA is urging both government and private users to treat the TeleMessage security risk as serious and take immediate action.