Deficient State Resolution in Matrix Specification Affects Users
CVE-2025-49090

7.1HIGH

Key Information:

Vendor

Matrix

Status
Matrix Specification
Vendor
CVE Published:
2 October 2025

What is CVE-2025-49090?

The Matrix specification prior to version 1.16 exhibits insufficient mechanisms for state resolution. This flaw can lead to improper handling of room state, potentially jeopardizing user interactions and overall functionality. Specific areas affected include room versions prior to 12 and state resolution approaches before version 2.1. Given the reliance on accurate state management in collaborative environments, this vulnerability emphasizes the need for immediate attention and updates to maintain security integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Matrix specification 0 < 1.16

References

https://matrix.org/blog/2025/08/security-release/
https://github.com/Nheko-Reborn/nheko/issues/1931
https://github.com/matrix-org/matrix-spec/releases/tag/v1.16

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.