CVE-2026-62347

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call SPA logs the password URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the application operator. Users can therefore...

CVE-2026-62347

The Element Call native Matrix video conferencing application (versions 0.16.0 through 0.20.3 ) is vulnerable to sensitive information disclosure. The standalone SPA component logs the password URL query parameter; if a user submits an error report (rageshake ), these logs are shared with the app...

EUVD-2026-114519

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call SPA logs the password URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the application operator. Users can therefore...

CVE-2026-62347 Element Call exposes shared passwords in logs

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call SPA logs the password URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the application operator. Users can therefore...

CVE-2026-62347: element-hq element-call: Element Call is a native Matrix video conferencing application

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call SPA logs the password URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the application operator. Users can therefore...