Mattermost vulnerabilities
512 CVEs and advisories name Mattermost as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-10545Guest user can add unauthorized team users to private channels
- CVE-2025-58075Arbitrary Mattermost Team can be joined by manipulating the SAML RelayState
- CVE-2025-54499Insecure string comparison enables timing attacks
- CVE-2025-41443Guest user can discover active public channels
- CVE-2025-58084Mattermost Desktop App crashes when clicking on malformed external URL
- CVE-2025-9081IDOR in board file download allows any user to download any file by UUID
- CVE-2025-9079Admin RCE via prepackaged plugins by way of misconfigured imports directory
- CVE-2025-9072One-Click Mattermost Account Takeover via Poisoned RelayState SAML Parameter
- CVE-2025-9084Open redirect in OAuth login
- CVE-2025-9078Weak cache keys lead to post IDOR and link preview poisoning
- CVE-2025-9076Mattermost Server exposes sensitive user credentials during shared channel membership synchronization
- CVE-2025-8402Nil pointer dereference in bulk import crashes server
- CVE-2025-6465Path traversal in image upload with preview overwrite
- CVE-2025-47870Team invite ID leaked to team admin with no member invite privileges
- CVE-2025-49222Mattermost Shared Channel Upload Type Validation Bypass
- CVE-2025-8023Path Traversal in Template Upload Allows Uploading Files Outside Target Directory
- CVE-2025-53971Channel and Team Membership APIs inadvertently allow loss of Member privileges.
- CVE-2025-47700AI plugin APIs can be triggered using post actions
- CVE-2025-49810Thread summarization allows persistent access to channel
- CVE-2025-36530Import Path Traversal Enables Unauthorized Unsigned Plugin Installation
- CVE-2025-8285Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin
- CVE-2025-54525Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
- CVE-2025-54478Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin
- CVE-2025-54463Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin
- CVE-2025-54458Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin
- CVE-2025-53910Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin
- CVE-2025-53857Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin
- CVE-2025-53514Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin
- CVE-2025-52931Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
- CVE-2025-49221Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin