Code Injection Vulnerability in Mattermost Desktop App for macOS
CVE-2025-1398

10CRITICAL

Key Information:

Vendor

Mattermost
Status
Mattermost
Vendor
CVE Published:
17 March 2025

What is CVE-2025-1398?

The Mattermost Desktop App for macOS versions up to 5.10.0 has been found to include unnecessary entitlements that expose the application to code injection attacks. An attacker with remote access can exploit this vulnerability to bypass macOS Transparency, Consent, and Control (TCC), which governs user permissions for accessing sensitive information. As a result, unauthorized actions may be performed without the user's consent, raising significant security concerns.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Mattermost MacOS 0 <= 5.10.0

Mattermost MacOS 5.11.0

References

https://mattermost.com/security-updates

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

JSON
.