VYPR
← All advisories
High severity7.1OSV Advisory· Published Oct 2, 2025· Updated Jun 17, 2026

CVE-2025-54315

CVE-2025-54315

Description

The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Matrix Org/Matrix SpecOSV2 versions
    0.2.0, client-server/0.3.0, client-server/r0.1.0, …+ 1 more
    • (no CPE)range: 0.2.0, client-server/0.3.0, client-server/r0.1.0, …
    • (no CPE)range: <1.16

Patches

Vulnerability mechanics

References

2

News mentions

1