Information Disclosure in Matter Project Chip

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: MITRE

Description

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-78806

EUVD

EUVD-2026-84242

Affected Vendors & Products

Vendor	Product	Version / Range
matter_project	chip	1.5.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a local information disclosure issue in the Matter Standard Specification-Implementation gap for version 1.5.1 of the Matter Project Chip. It occurs in the ChipDeviceController.cpp component through the PerformCommissioningStep function, allowing a local attacker to access sensitive information.

Impact Analysis

A local attacker could exploit this to obtain sensitive data from your Matter-enabled device, potentially leading to privacy breaches or further attacks on your network.

Hi! I’m here to help you understand CVE-2026-78806. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70