CVE-2026-63097 | matrix-org dendrite up to 0.13.8 Context Endpoint context.go roomexists access control

July 17, 2026 Yanac

A vulnerability was found in matrix-org dendrite up to 0.13.8. It has been declared as problematic. This affects an unknown part of the file syncapi/routing/context.go of the component Context Endpoint. The manipulation of the argument roomexists results in improper access controls. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is cataloged as CVE-2026-63097. The attack must be initiated from a local position. There is no exploit available.VulDB Recent EntriesRead More