PT-2025-51853 · Mattermost · Mattermost Desktop App

Doyensec · Published 2025-12-17 · Updated 2025-12-17 · CVE-2025-13321

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 6.0.0

Description The Mattermost Desktop App does not properly remove sensitive information from its logs or clear data when a server is deleted. This could allow an attacker who has access to a user's system to obtain potentially sensitive information by reading the application logs.

Recommendations Update to Mattermost Desktop App version 6.0.0 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-13321

GHSA-G6QX-WQ5W-WR8V

Affected Products

Mattermost Desktop App

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-13321 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13321 · Vendor Advisory
• https://mattermost.com/security-updates · Vendor Advisory
• https://twitter.com/CVEnew/status/2001365743204434001 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2001421613506457906 · Twitter Post
• https://t.me/CVEtracker/40058 · Telegram Post