Session Management Flaw in Mattermost Mobile Apps Affecting Multiple Versions

CVE-2025-30516

Summary

The Mattermost Mobile Apps prior to version 2.25.0 possess a session management flaw that prevents the proper termination of user sessions upon logout, particularly under unstable connectivity conditions. This vulnerability allows unauthorized users on shared devices to gain access to sensitive notification content that should have been protected, posing a significant risk to user privacy and data security.

References