A vulnerability in the Matrix specification allows authenticated users to bypass create event uniqueness, posing a risk to room state integrity.

This vulnerability involves an improper enforcement of a unique action (CWE-837) where create events lack uniqueness. The issue requires authenticated, low-privileged access to the network to exploit, as indicated by the CVSS vector.

The lack of create event uniqueness can lead to integrity compromises within Matrix-based communication rooms. Given the CVSS score of 7.1, this is a high-severity issue that could allow malicious actors to manipulate room state, leading to potential unauthorized administrative actions or room instability. Organizations relying on Matrix for secure communication should prioritize this to maintain the trust and reliability of their messaging infrastructure.

Immediate Action: Upgrade to Matrix specification version 1.16 or later, which enforces the required create event uniqueness.

Proactive Monitoring: Review room state logs and administrative event history for signs of anomalous or duplicate create events.

Compensating Controls: Ensure that homeservers are configured to strictly enforce room version policies and restrict administrative actions to verified users only.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant flaw in the foundational logic of the Matrix protocol. Administrators must verify their homeserver implementations and ensure they are upgraded to a version compliant with the 1.16 specification. Failure to address this could result in integrity issues that undermine the security of room state management across the federated network.