← CVE Intelligence

CVE-2025-49810

Thread summarization allows persistent access to channel PUBLISHED

Description (CNA)

Mattermost versions 10.5.x <= 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 10.5.0 through 10.5.8; unaffected 10.10.0; unaffected 10.5.9

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.