Access Control Vulnerability in Mattermost Confluence Plugin

CVE-2025-54458

What is CVE-2025-54458?

The Mattermost Confluence Plugin prior to version 1.5.0 contains a significant security flaw in its access control mechanisms. This vulnerability allows unauthorized users to create subscriptions for Confluence spaces to which they do not have legitimate access. By exploiting this weakness, attackers may gain access to restricted information, potentially leading to further security breaches. Organizations using the affected versions should prioritize updating to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References