The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17664
http://www.tickertape.org/projects/sticker/release_notes-3.1.0b2.html