CVE-2025-59161 - CVE House

Back to Database

Status published Low CVE-2025-59161

In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

2.7 CVSS

Vulnerability Description

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated attacker-supplied room. While the effect of this is temporary, it may still confuse users into acting on incorrect assumptions. The issue has been patched and users should upgrade to 1.11.112. A reload/refresh will fix the incorrect room list state, removing the attacker's room and restoring the original room.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59161

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from element-hq

View All →

Matrix Authentication Service account password can be changed using an authenticated session without supplying the current password

Synapse: Invalid device keys degrade federation functionality

Element Web could load a malicious instance of Element Call leaking media encryption keys

Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X iOS allows the entity in control of the well-known file to break the confidentiality of embedded Element Call

Affected Vendor

element-hq

View all reports →

Affected Software

element-web

Vulnerable Versions:

< 1.11.112

Timeline

Official Publish: September 16th, 2025

Last Modified: September 16th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1213 Data from Information Repositories

T1565.002 Stored Data Manipulation