The Matrix.org Foundation, which oversees the Matrix decentralized communication protocol, said on Monday multiple Matrix clients and libraries contain a vulnerability that can potentially be abused to expose encrypted messages. The organization said a blunder in an implementation of the Matrix key sharing scheme – designed to allow a user’s newly logged-in device to obtain the keys to decrypt old messages – led to the creation of client code that fails to adequately verify device identity.

Read full article on The Register