High severity7.1OSV Advisory· Published Oct 2, 2025· Updated Apr 15, 2026
CVE-2025-49090
CVE-2025-49090
Description
The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.
Affected products
1- Range: 0.2.0, client-server/0.3.0, client-server/r0.1.0, …
Patches
181a864545f7dVulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
4News mentions
0No linked articles in our index yet.