CVE-2025-59047 | matrix-org matrix-rust-sdk up to 0.14.0 normalized_power_level calculation (GHSA-qhj8-q5r6-8q6j)

September 12, 2025 Yanac

A vulnerability labeled as problematic has been found in matrix-org matrix-rust-sdk up to 0.14.0. This affects the function RoomMember::normalized_power_level. Such manipulation leads to incorrect calculation.

This vulnerability is uniquely identified as CVE-2025-59047. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More