← CVE Intelligence

CVE-2026-75025

Mattermost Desktop local network access from server-rendered content PUBLISHED

Description (CNA)

Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private network resources. Thanks to game0v3r for contributing to this improvement under the Mattermost responsible disclosure policy. Mattermost Advisory ID: MMSA-2026-00698

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 6.2.2; unaffected 6.3.0; unaffected 6.2.3.0

CWE

CWE-346

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.