CVE-2026-102531

Impact Local authenticated users that are conspiring with, or tricked by, a malicious federated homeserver can cause room aliases to have their destination room changed. Homeservers that do not federate or only participate in a closed, trusted federation are not affected. Homeservers that only ha...