CVE-2025-27146 - Matrix Appservice IRC Arbitrary IRC Command Execution Vulnerability

CVE ID : CVE-2025-27146
Published : Feb. 25, 2025, 8:15 p.m. | 28 minutes ago
Description : matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability has been patched in matrix-appservice-irc version 3.0.4.
Severity: 2.7 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...