Critical vulnerabilities compromising end-to-end encryption in many Matrix clients.
Developers of the decentralized communication platform Matrix have warned of critical vulnerabilities found in the matrix-js-sdk, matrix-ios-sdk, and matrix-android-sdk2 libraries, which allow server administrators to impersonate other users and read messages in end-to-end encrypted (E2EE) chats. The vulnerabilities are caused by errors in specific implementations of the Matrix protocol and are not issues with the protocol itself. Currently, the project has released updates for the problematic SDKs […]
