VULNERABILITY INTELLIGENCE

CVE-2025-41436

CVSS score3.1 LOW
EPSS probability0.18%
CISA KEVNot currently listed
Published2025-11-14
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-863

Primary references