PT-2025-51853 · Mattermost · Mattermost Desktop App

Doyensec · CVE-2025-13321 · Published 2025-12-17 · Updated 2025-12-17

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 6.0.0

Description The Mattermost Desktop App does not properly remove sensitive information from its logs or clear data when a server is deleted. This could allow an attacker who has access to a user's system to obtain potentially sensitive information by reading the application logs.

Recommendations Update to Mattermost Desktop App version 6.0.0 or later.

Exploit

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-13321

GHSA-G6QX-WQ5W-WR8V

Affected Products

Mattermost Desktop App

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13321.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-13321 · Vendor Advisory
• https://mattermost.com/security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13321 · Security Note
• https://t.me/CVEtracker/40058 · Telegram Post
• https://twitter.com/CVEnew/status/2001365743204434001 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13321 · Note
• https://twitter.com/VulmonFeeds/status/2001421613506457906 · Twitter Post