Skip to content
OpenAdvisories

Product · element-hq

matrix-authentication-service

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2025-62425

    Matrix Authentication Service account password can be changed using an authenticated session without supplying the current password

    MAS (Matrix Authentication Service) is a user management and authentication service for Matrix homeservers, written and maintained by Element. A logic flaw in matrix-authentication-service 0.20.0 through 1.4.0 allows an attacker with access to an authenticate…

    element-hq matrix-authentication-service