Zhvilluesit e platform\u00ebs s\u00eb komunikimeve t\u00eb decentralizuara Matrix njoftuan p\u00ebr zbules\u00ebn e vulnerabiliteteve kritike n\u00eb bibliotekat matrix-js-sdk, matrix-ios-sdk dhe matrix-android-sdk2, t\u00eb cilat lejojn\u00eb administrator\u00ebt e server\u00ebve t\u00eb pretendojn\u00eb p\u00ebr p\u00ebrdorues t\u00eb tjer\u00eb dhe t\u00eb lexojn\u00eb mesazhet n\u00eb bisedat me enkriptim end-to-end (E2EE). Vulnerabilitetet shkaktohen nga gabimet n\u00eb zbatime t\u00eb ndara t\u00eb protokollit Matrix dhe nuk jan\u00eb probleme t\u00eb vet\u00eb protokollit. Aktualisht, projekti ka l\u00ebshuar p\u00ebrdit\u00ebsime p\u00ebr SDK-t\u00eb problematike dhe p\u00ebr disa nga aplikacionet klient t\u00eb nd\u00ebrtuara mbi to. <\/p>\n
P\u00ebr t\u00eb kryer me sukses nj\u00eb sulm, k\u00ebrkohet qasje n\u00eb nj\u00eb server t\u00eb kontrolluar nga sulmuesi serverit<\/a> (homeserver \u2014 server p\u00ebr ruajtjen e historis\u00eb dhe regjistrave t\u00eb klient\u00ebve). P\u00ebrdorimi i enkriptimit t\u00eb plot\u00eb n\u00eb an\u00ebn e klientit nuk lejon administratorin server\u00eb<\/a> t\u00eb nd\u00ebrhyj\u00eb n\u00eb shk\u00ebmbimin e mesazheve, por vulnerabilitetet e zbuluara ofrojn\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb anashkaluar k\u00ebt\u00eb mbrojtje. Problemet prekin klientin kryesor t\u00eb Matrix Element (m\u00eb par\u00eb Riot) p\u00ebr Web, sisteme desktop, iOS dhe Android, si dhe aplikacione t\u00eb pal\u00ebve t\u00eb treta, duke p\u00ebrfshir\u00eb Cinny, Beeper, SchildiChat, Circuli dhe Synod.im. Vulnerabilitetet nuk shfaqen n\u00eb bibliotekat matrix-rust-sdk, hydrogen-sdk, Matrix Dart SDK, mautrix-python, mautrix-go dhe matrix-nio, si dhe n\u00eb aplikacionet Hydrogen, ElementX, Nheko, FluffyChat, Syphon, Timmy, Gomuks dhe Pantalaimon. <\/p>\n Dallohet tre skenar\u00ebt kryesor\u00eb t\u00eb realizimit t\u00eb sulmit: <\/p>\n Hulumtuesit q\u00eb zbuluan dob\u00ebsin\u00eb gjithashtu demonstruan sulme q\u00eb \u00e7ojn\u00eb n\u00eb shtimin e nj\u00eb p\u00ebrdoruesi t\u00eb jasht\u00ebm n\u00eb bised\u00eb ose lidhjen e nj\u00eb pajisjeje t\u00eb huaj me p\u00ebrdoruesin. Sulmet bazohen n\u00eb faktin se mesazhet e sh\u00ebrbimit, t\u00eb p\u00ebrdorura p\u00ebr t\u00eb shtuar p\u00ebrdorues n\u00eb bised\u00eb, nuk lidhen me \u00e7el\u00ebsat e krijuesit t\u00eb bised\u00ebs dhe mund t\u00eb gjenerohen nga administratori i serverit. Zhvilluesit nga projekti Matrix i klasifikuan k\u00ebto dob\u00ebsi si t\u00eb pap\u00ebrfillshme, pasi manipulime t\u00eb tilla nuk do t\u00eb kalojn\u00eb pa u v\u00ebn\u00eb re \u2014 n\u00eb rastin e z\u00ebvend\u00ebsimit t\u00eb p\u00ebrdoruesit, ai do t\u00eb shfaqet n\u00eb list\u00ebn e p\u00ebrdoruesve t\u00eb bised\u00ebs, dhe kur nj\u00eb pajisje shtohet, do t\u00eb jepet nj\u00eb paralajm\u00ebrim, ndersa pajisja do t\u00eb shenjohet si e pap\u00ebrfunduar (n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, sapo pajisja e z\u00ebvend\u00ebsuar t\u00eb shtohet, \u00e7el\u00ebsat e p\u00ebrbashk\u00ebt t\u00eb nevojsh\u00ebm p\u00ebr dekriptimin e mesazheve do t\u00eb fillojn\u00eb t\u00eb kalojn\u00eb). \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 Matrix \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 matrix-js-sdk, matrix-ios-sdk \u0438 matrix-android-sdk2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0447\u0430\u0442\u0430\u0445 \u0441\u043e \u0441\u043a\u0432\u043e\u0437\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c (E2EE). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Matrix \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0441\u0430\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 SDK […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105214","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsi kritike, q\u00eb komprometojn\u00eb enkriptimin fund n\u00eb fund n\u00eb shum\u00eb klient\u00eb t\u00eb Matrix | ProHoster","description":"Zhvilluesit e platform\u00ebs s\u00eb komunikimeve t\u00eb decentralizuara Matrix paralajm\u00ebruan p\u00ebr zbulimin e dob\u00ebsive kritike n\u00eb bibliotekat matrix-js-sdk, matrix-ios-sdk dhe matrix-android-sdk2, t\u00eb cilat lejojn\u00eb administrator\u00ebve t\u00eb server\u00ebve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/kriticheskie-uyazvimosti-komprometiruyushhie-skvoznoe-shifrovanie-vo-mnogih-matrix-klientah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 Matrix-\u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 Matrix \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 matrix-js-sdk, matrix-ios-sdk \u0438 matrix-android-sdk2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/kriticheskie-uyazvimosti-komprometiruyushhie-skvoznoe-shifrovanie-vo-mnogih-matrix-klientah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-29T13:36:37+00:00","article:modified_time":"2022-09-29T13:36:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105214","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:42:04","updated":"2026-02-22 15:31:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105214"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105214\/revisions"}],"predecessor-version":[{"id":162385,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105214\/revisions\/162385"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"