CVE-2025-27606— Element Android PIN autologout bypass
Quick assessment
Affected
element-hq element-android
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Element Android是开源Element的一个 Android Matrix 客户端。 Element Android 1.6.32及之前版本存在安全漏洞，该漏洞源于在输入错误PIN超过配置次数时未能注销用户，可能导致攻击者猜测PIN。
Possible ATT&CK Techniques 1 AI
T1110.001 · Password Guessing
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-27606
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Element Android PIN autologout bypass
Source: CVE Program / CVE List V5
Vulnerability Description
Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to guess the PIN. Version 1.6.34 solves the issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对错误会话暴露数据元素
Source: CVE Program / CVE List V5
Vulnerability Title
Element Android 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Element Android是开源Element的一个 Android Matrix 客户端。 Element Android 1.6.32及之前版本存在安全漏洞，该漏洞源于在输入错误PIN超过配置次数时未能注销用户，可能导致攻击者猜测PIN。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| element-hq | element-android | < 1.6.34 | - |
|
II. Public POCs for CVE-2025-27606
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-27606
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-27606 (2)
Vendor Advisories for CVE-2025-27606 (1)
IV. Related Vulnerabilities
Same vendor: element-hq
-
CVE-2026-55850
Element Web: A malicious homeserver can inject HTML in Eleme -
CVE-2026-48007
Element Call reports full URLs of visited pages to analytics -
CVE-2026-45078
Synapse CPU starvation (Denial of Service) -
CVE-2026-45076
Synapse pagination denial of service -
CVE-2026-24044
ESS Community Helm Chart has a weak server key generation me
Same weakness: CWE-488
-
CVE-2026-71850
Hono: `memo()` retains SSR output across requests, leading t -
CVE-2026-16326
consul-mcp-server vulnerable to cross-tenant credential reus -
CVE-2026-16498
terraform-mcp-server vulnerable to cross-tenant credential r -
CVE-2026-14621
FederatedAI FATE OSX Broker QueuePushReqStreamObserver.java -
CVE-2026-54311
n8n: Merge Node SQL Mode Prototype Pollution
V. Comments for CVE-2025-27606
No comments yet