CVE-2025-49090

LLM-synthesized narrative grounded in this CVE's description and references.

• Matrix Org/Matrix SpecOSV

  Range: 0.2.0, client-server/0.3.0, client-server/r0.1.0, …
• osv-coords

  pkg:rpm/opensuse/matrix-synapse&distro=openSUSE%20Tumbleweed

  Range: < 1.136.0-1.1

• github.com/Nheko-Reborn/nheko/issues/1931nvd
• github.com/matrix-org/matrix-spec/releases/tag/v1.16nvd
• matrix.org/blog/2025/08/project-hydra-improving-state-res/nvd
• matrix.org/blog/2025/08/security-release/nvd

• Russian Threat Groups Use RDP, VPN, Supply Chain Attacks, and Social Engineering for Initial Access
  Cyber Security News · May 22, 2026