Email Ownership Validation Flaw in Mattermost by Mattermost Inc.

CVE-2025-41410

What is CVE-2025-41410?

Mattermost has identified a vulnerability where certain versions fail to accurately validate the ownership of emails during the Slack import process. This loophole allows malicious actors to create verified user accounts utilizing arbitrary email domains, effectively bypassing the essential email verification checks required for team access. This poses significant risks to user account security and overall system integrity. It is crucial for users running affected versions to apply updates to protect against potential exploitation.

References