GO-2025-3397 — Vulnetix

GO-2025-3397 PUBLISHED

matrix-media-repo (MMR) allows unauthenticated writes to the media repository, which may allow planting of problematic content in github.com/t2bot/matrix-media-repo

Affected Products

Vendor	Product	Versions
github.com	t2bot/matrix-media-repo	0

Timeline

Jan 16, 2025 CVE Published
Mar 3, 2026 CVE Updated

References

https://github.com/t2bot/matrix-media-repo/security/advisories/GHSA-8vmr-h7h5-cqhg advisory
https://github.com/matrix-org/matrix-spec-proposals/pull/3916 url

Open in Interactive Console →