Improper URL Handling in Element X iOS Client

CVE-2026-55644

What is CVE-2026-55644?

Element X iOS, a Matrix iOS Client by Element, is vulnerable to improper URL handling in versions prior to 26.05.0. The application fails to verify the URL allowlist when processing the io.element.call:// scheme. An attacker could exploit this by deceiving the user into opening a specially crafted URL, leading to the loading of a malicious origin within the WKWebView on the call screen. If microphone and camera permissions have been granted to Element X iOS, the attacker could gain unauthorized access to these devices, compromising user privacy. The issue has been resolved in version 26.05.0, and users should upgrade to ensure their devices are secure.

References