PT-2025-29132 · Unknown · Matrix-Sdk

Poljar · Published 2025-07-10 · Updated 2025-07-17 · CVE-2025-53549

Positive Technologies (AI Summary)

CVSS v4.0

5.2

Medium

Base vector

AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions: matrix-sdk versions 0.11 through 0.12

Description: An SQL injection vulnerability exists in the EventCache::find event with relations method. This allows malicious room members to execute arbitrary SQL commands in Matrix clients that directly pass relation types provided by those room members into this method, when used with the default sqlite-based store backend. Exploitation is unlikely, as no known clients currently use the API in this manner.

Recommendations: Pass only trusted or sanitised relation types to the filter argument of the EventCache::find event with relations() method. Update to version 0.13.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-53549

GHSA-275G-G844-73JH

OPENSUSE-SU-2025:15351-1

RUSTSEC-2025-0043

Affected Products

Matrix-Sdk

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53549.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:15351-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-275g-g844-73jh · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2025-0043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53549 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53549 · Vendor Advisory
• https://github.com/matrix-org/matrix-rust-sdk/pull/4849 · Note
• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-275g-g844-73jh · Note
• https://github.com/matrix-org/matrix-rust-sdk · Note
• https://github.com/matrix-org/matrix-rust-sdk/commit/d0c01006e4808db5eb96ad5c496416f284d8bd3c · Note
• https://twitter.com/CVEnew/status/1943700225551417833 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1943481945234555313 · Twitter Post
• https://rustsec.org/advisories/RUSTSEC-2025-0043.html · Note
• https://suse.com/security/cve/CVE-2025-53549 · Note
• https://crates.io/crates/matrix-sdk-sqlite · Note