CVE-2025-13326 — Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store

CVE-2025-13326

Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store PUBLISHED

Description (CNA)

Mattermost Desktop App versions <6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 6.0.0; unaffected 6.0.0

CWE

CWE-693

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.