CVE-2025-1398

macOS TCC Bypass via Code Injection PUBLISHED

Description (CNA)

Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 5.10.0; unaffected 5.11.0

CWE

CWE-426

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.