Devices built with Matter.js stop exposing certain sensitive list entries from one paired smart-home network to another. The affected handling includes video-session lists and certificate-related lists; a remote read previously returned entries belonging to every network instead of only the requester’s.
Ingo Fischer also removes the departed network’s entries when it is unpaired, preventing a later network that reuses its internal identifier from inheriting them. The existing WebRTC requestor already exposes session lists; some other affected list types are groundwork for implementations still to come.