Information Disclosure Vulnerability in Mattermost Platform

CVE-2025-47871

What is CVE-2025-47871?

The vulnerability in Mattermost arises from inadequate validation of channel membership when retrieving metadata for playbook runs. This allows authenticated users, who are part of a playbook but not members of a specific channel, to gain access to sensitive information linked to private channels. Information such as channel names, display names, and participant counts might be exposed through the run metadata API endpoint, which poses a security risk to user privacy and data integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References