PT-2025-5265 · Mjolnir · Mjolnir

Turt2Live · Published 2025-01-21 · Updated 2025-01-22 · CVE-2025-24024

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mjolnir version 1.9.0

Description Mjolnir is a moderation tool for Matrix. It responds to management commands from any room the bot is a member of, potentially allowing users who are not operators to use the bot's functions, including server administration components if enabled.

Recommendations For Mjolnir version 1.9.0, upgrade to version 1.9.1 or higher. If upgrading to 1.9.1 or higher is not possible, downgrade to version 1.8.3.

Exploit

Fix

Weakness Enumeration

CWE-671

Related Identifiers

CVE-2025-24024

GHSA-3JQ6-XC85-M394

Affected Products

Mjolnir

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24024.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-24024 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24024 · Vendor Advisory
• https://github.com/matrix-org/mjolnir/commit/d0ef527a9e3eb45e17143d5295a64b775ccaa23d · Note
• https://github.com/matrix-org/mjolnir/security/advisories/GHSA-3jq6-xc85-m394 · Note
• https://github.com/matrix-org/mjolnir/commit/b437fa16b5425985715df861987c836affd51eea · Note
• https://twitter.com/CveFindCom/status/1881787063730602374 · Twitter Post
• https://twitter.com/CVETracker/status/1882156471053373586 · Twitter Post
• https://twitter.com/CVEnew/status/1881806575628910605 · Twitter Post
• https://t.me/cvedetector/16007 · Telegram Post