CVE-2026-78806: Matter Matter Standard Specification-Implementation gap vulnerability
Published Sep 21, 2026
·Updated
An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component
Affected Software
2 affected components
Matter Matter Standard Specification-Implementation gap=v1.5.1
Matter Project Chip=V1.5.1
Event History
Sep 21, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:16 PM
Description
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is described as requiring a local attacker. The provided information does not identify any remote attack path.
2
What information could be exposed?
The reported impact is disclosure of sensitive information. The provided data does not specify the type of information or the conditions under which it is disclosed.
3
Which component should be prioritized for investigation?
Investigation should focus on the PerformCommissioningStep function in ChipDeviceController.cpp in Matter Project Chip v1.5.1. The affected data also identifies a Matter Standard Specification-Implementation gap at version 1.5.1.