We’ve recently seen a disturbing trend: users running WAHA with the API publicly exposed and without any form of protection.

Unfortunately, a few of them learned the hard way — their sessions were compromised, and their accounts got hacked.

Read more - https://waha.devlike.pro/blog/security-alert/