A newly discovered security flaw in the Android version of WhatsApp allows another application to upload a user’s entire database of chats to a third-party server, without their consent.

WhatsApp user chats on Android liable to theft due to file system flaw | Technology | theguardian.com