CVE-2021-33506: 8x8 Jitsi Meet

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This can allow an attacker to circumvent conference moderation.

Affected products

  • 8x8 Jitsi Meet: before 2.0.5963 (fixed in 2.0.5963)

Published 2021-05-26. Last modified 2026-06-17.