CVE-2024-36402

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix. MMR before version 1.3.5 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the local homeserver in an unauthenticated way. The implication is that unauthenticated remote adversaries can use this functionality to plant problematic content into the media repository. MMR 1.3.5 introduces a partial mitigation in the form of new endpoints which require authentication for media downloads. The unauthenticated endpoints will be frozen in a future release, closing the attack vector. Though extremely limited, server operators can use more strict rate limits based on IP address as a partial workaround.

• CWE-287

• https://github.com/matrix-org/matrix-spec-proposals/pull/3916Issue Tracking
• https://github.com/t2bot/matrix-media-repo/security/advisories/GHSA-8vmr-h7h5-cqhgVendor Advisory

Published

Jan 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36397Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutr…6.1
• CVE-2024-36398A vulnerability has been identified in SINEC NMS (All versio…7.8
• CVE-2024-36399Kanboard is project management software that focuses on the …6.3
• CVE-2024-3640An unquoted executable path exists in the Rockwell Automatio…7
• CVE-2024-36400nano-id is a unique string ID generator for Rust. Affected v…9.8
• CVE-2024-36401GeoServer is an open source server that allows users to shar…9.8
• CVE-2024-36403Matrix Media Repo (MMR) is a highly configurable multi-homes…7.5
• CVE-2024-36404GeoTools is an open source Java library that provides tools …9.8
• CVE-2024-36405liboqs is a C-language cryptographic library that provides i…7.5
• CVE-2024-36406SuiteCRM is an open-source Customer Relationship Management …5.4
• CVE-2024-36407SuiteCRM is an open-source Customer Relationship Management …6.5
• CVE-2024-36408SuiteCRM is an open-source Customer Relationship Management …8.8