CVE-2025-25274
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 21, 2025
Updated: Mar 27, 2025
CWE ID 863
CWE ID 77
Summary
CVE-2025-25274 is a vulnerability affecting Mattermost versions 10.4.x up to 10.4.2, 10.3.x up to 10.3.3, and 9.11.x up to 9.11.8. This issue enables authenticated users to execute commands in archived channels where command execution should have been restricted. This vulnerability poses a risk for unintended command execution and potential security breaches. Users are advised to update their Mattermost installations to the latest versions to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mattermost Server
Affected Vendors
- Mattermost, Inc.