Go/github.com/mattermost/mattermost/server/v8 CVE-2025-9081: low 3.1, EPSS 0.27%

Mattermost boards plugin fails to restrict download access to files

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250721095935-11c36f4d1e44 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250721095935-11c36f4d1e44

Affected

Fixed versions

Sources

• osv: GHSA-f72g-52v7-mg3p#Go/github.com/mattermost/mattermost/server/v8
• https://nvd.nist.gov/vuln/detail/CVE-2025-9081
• https://github.com/mattermost/mattermost-plugin-boards/pull/114
• https://github.com/mattermost/mattermost-plugin-boards/commit/3f3e3becfe1d66db0d0f4fd235f04afd6e1ec40b
• https://github.com/mattermost/mattermost-plugin-boards
• https://mattermost.com/security-updates
• https://pkg.go.dev/vuln/GO-2025-3978

CVE-2025-9081 · published 2025-09-19T21:31:21Z · modified 2025-09-26T16:23:18Z · JSON