Matter.js corrects access checks on secure connections it initiates. Where special permission tags are configured, a remote device could inherit rights intended for the local controller while losing rights granted to its own identity.

Ingo Fischer makes the connection use the tags from the remote device’s signed certificate, including when reconnecting through a saved session. Older saved sessions with potentially incorrect tags are discarded so the devices establish a fresh secure connection. The correction applies to applications built on Matter.js; most installations do not configure these tags.