What is CVE-2025-24024?

CVE-2025-24024 is a critical-severity vulnerability in Matrix-org Mjolnir, classified under CWE-671. CVSS score: 9.1/10. Published 2025-01-21.

How severe is CVE-2025-24024?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Matrix-org Mjolnir

CVE-2025-24024

Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration co…

EPSS: 0.006 (43.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Matrix-org Mjolnir — versions = 1.9.0

Weakness classification (CWE)

CWE-671

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-24024?: CVE-2025-24024 is a critical-severity vulnerability in Matrix-org Mjolnir, classified under CWE-671. CVSS score: 9.1/10. Published 2025-01-21.
How severe is CVE-2025-24024?: Critical severity. CVSS v3 base score is 9.1 out of 10.