{"id":"CVE-2025-54315","title":"The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.","summary":"The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cwe":["CWE-837"],"published":"2025-10-02","updated":"2026-10-08","sourceUpdated":"2026-10-08T23:10:00.213","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-54315","references":[{"url":"https://github.com/matrix-org/matrix-spec/releases/tag/v1.16","label":"cve@mitre.org"},{"url":"https://matrix.org/blog/2025/08/project-hydra-improving-state-res/","label":"cve@mitre.org"}],"tags":["nvd"],"epss":0.0033,"epssPercentile":0.24125,"ingestedAt":"2026-10-08T23:16:47.357Z","slug":"CVE-2025-54315","body":"## Overview\n\nThe Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}