CVE-2022-39252

CVE-2022-39252 is a high-severity vulnerability affecting matrix-rust-sdk versions prior to 0.6, where the Matrix encryption library fails to validate the source of forwarded room keys. This oversight allows malicious homeservers to inject invalid room keys, potentially enabling impersonation attacks. With a CVSS score of 7.5, the vulnerability is network-exploitable with low attack complexity, leading to a high impact on integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.