PT-2025-16220 · Mattermost · Mattermost Mobile Apps

Elias Nahum · Published 2025-04-14 · Updated 2025-09-24 · CVE-2025-30516

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile Apps versions <=2.25.0

Description: The issue arises when Mattermost Mobile Apps fail to terminate sessions during logout under certain conditions, such as poor connectivity, allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications.

Recommendations: For Mattermost Mobile Apps versions <=2.25.0, update to a version higher than 2.25.0 to ensure proper session termination during logout.

Fix

LPE

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2025-30516

Affected Products

Mattermost Mobile Apps

References · 8

• https://mattermost.com/security-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-30516 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30516 · Security Note
• https://t.me/cvedetector/22829 · Telegram Post
• https://twitter.com/CVEnew/status/1911679825875530117 · Twitter Post
• https://twitter.com/NightfallCVE/status/1970876852274348284 · Twitter Post
• https://t.me/cvetracker/21503 · Telegram Post
• https://twitter.com/NightfallCVE/status/1970876932758859845 · Twitter Post