Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-49810

Mattermost versions 10.5.x <= 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts

VectorNETWORK

PublishedAug 21, 2025, 08:15

Published Byresponsibledisclosure@mattermost.com

Base Score

Score4.3

Package (Ecosystem)IntroducedFixedLimit

github.com/mattermost/mattermost-server(Go)10.5.010.5.9N/A

github.com/mattermost/mattermost/server/v8(Go)08.0.0-20250721095846-c602a4a78e1fN/A

CWE-863

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK