Skip to content
OpenAdvisories

Product · element-hq

element-desktop

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-119407

    Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters

    Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters in loadSession, allowing remote unauthenticated attackers to log out users and clear local stores. Attackers can lure logged-in users into opening links with …

    element-hq element-web element-desktop
  • High 7.0
    CVE-2024-47771

    Element Desktop vulnerable to potential exposure of access token via authenticated media

    Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector h…

    element-hq element-desktop