CVE-2025-31126: Element X iOS allows the entity in control of the well-known file to break the confidentiality of embedded Element Call

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-04-03 · updated 2026-06-17
Weakness: CWE-200

Description

Element X iOS is a Matrix iOS Client provided by Element. In Element X iOS version between 1.6.13 and 25.03.7, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. This vulnerability is fixed in 25.03.8.

Affected products

element-hq element-x-ios: from 1.6.13, < 25.03.8

References

https://github.com/element-hq/element-meta/issues/2441
https://github.com/element-hq/element-x-ios/security/advisories/GHSA-69qf-p24v-rf8j

Get alerted when CVE-2025-31126 or the next vulnerability affects your stack