CVE-2025-20086

Summary

CVE-2025-20086 is a vulnerability affecting various versions of Mattermost, including 10.2.x up to 10.2.0, 9.11.x up to 9.11.5, 10.0.x up to 10.0.3, and 10.1.x up to 10.1.3. This issue stems from the software's failure to validate post props properly. A malicious authenticated user can exploit this vulnerability by crafting a malicious post, leading to a crash of the affected Mattermost instance. Although the details of the exact crash mechanism are not provided, it is clear that this issue poses a significant risk to organizations using the vulnerable versions of Mattermost and emphasizes the importance of timely updates to ensure security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.