PT-2025-41801 · Mattermost · Mattermost Desktop App

Doyensec · Published 2025-10-13 · Updated 2025-10-13 · CVE-2025-58084

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions through 5.13.0

Description The Mattermost Desktop App does not properly validate URLs originating from outside the configured Mattermost servers. This allows a malicious server to cause the application to crash by sending a specially crafted URL to a user.

Recommendations Update Mattermost Desktop App to a version later than 5.13.0.

Fix

Weakness Enumeration

CWE-1287

Related Identifiers

CVE-2025-58084

Affected Products

Mattermost Desktop App

References · 6

• https://mattermost.com/security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58084 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58084 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1977841560910712841 · Twitter Post
• https://t.me/CVEtracker/34786 · Telegram Post
• https://twitter.com/CVEnew/status/1977831057698296134 · Twitter Post