Go/github.com/mattermost/mattermost/server/v8 CVE-2025-41443: medium 4.3, EPSS 0.31%

Mattermost has a Missing Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250822090405-e8c7e7d0252b or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250822090405-e8c7e7d0252b

Affected

Fixed versions

Sources

• osv: GHSA-7cr3-38jm-6p45
• https://nvd.nist.gov/vuln/detail/CVE-2025-41443
• https://github.com/mattermost/mattermost/pull/31327
• https://github.com/mattermost/mattermost/pull/33778
• https://github.com/mattermost/mattermost/commit/e8c7e7d0252bbf1e098aae4a5ea05d945afd7e70
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2025-41443 · published 2025-10-16T09:30:24Z · modified 2025-11-05T19:57:38.536178Z · JSON