Skip to content
OpenAdvisories

Product · element-hq

element-web

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-119407

    Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters

    Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters in loadSession, allowing remote unauthenticated attackers to log out users and clear local stores. Attackers can lure logged-in users into opening links with …

    element-hq element-web element-desktop
  • High 7.0
    CVE-2024-47779

    Element Web vulnerable to potential exposure of access token via authenticated media

    Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vecto…

    element-hq element-web