Access Control Vulnerability in Mattermost Confluence Plugin

CVE-2025-54458

What is CVE-2025-54458?

The Mattermost Confluence Plugin prior to version 1.5.0 contains a significant security flaw in its access control mechanisms. This vulnerability allows unauthorized users to create subscriptions for Confluence spaces to which they do not have legitimate access. By exploiting this weakness, attackers may gain access to restricted information, potentially leading to further security breaches. Organizations using the affected versions should prioritize updating to mitigate this risk.

References