Description
A logic error in the room key sharing functionality of matrix-js-sdk before 12.4.1 allows a malicious Matrix homeserver† participating in an encrypted room to steal room encryption keys from affected Matrix clients participating in that room. This allows the homeserver to decrypt end-to-end encrypted messages sent by affected clients.
Recommendation
Update the matrix-js-sdk package to the latest compatible version. Followings are version details:
- Affected version(s): < 12.4.1
- Patched version(s): 12.4.1
References
Could your website be exposed too?
SmartScanner can check your website for matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Matrix JavaScript SDK's key history sharing could share keys to malicious devices - CVE-2024-47080
- matrix-js-sdk has insufficient validation when considering a room to be upgraded by another - CVE-2025-59160
- matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor - CVE-2024-42369
- Improper beacon events in matrix-js-sdk can result in availability issues - CVE-2022-39236
You might also like:
See something that needs correcting? Let us knowUpdated August 08, 2023