Go/github.com/mattermost/mattermost/server/v8 CVE-2025-41423: low 3.1, EPSS 0.28%

Mattermost Playbooks fails to properly validate permissions

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250218121836-2b5275d87136 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250218121836-2b5275d87136

Affected

Fixed versions

Sources

• osv: GHSA-fr22-5377-f3p7#Go/github.com/mattermost/mattermost/server/v8
• https://nvd.nist.gov/vuln/detail/CVE-2025-41423
• https://github.com/mattermost/mattermost-plugin-playbooks/commit/f9f7064e4d9f3918d66bac1f5f9eb28f0723464b
• https://github.com/mattermost/mattermost/commit/2b5275d87136f07e016c8eca09a2f004b31afc8a
• https://github.com/mattermost/mattermost-plugin-playbooks
• https://mattermost.com/security-updates

CVE-2025-41423 · published 2025-04-24T09:30:33Z · modified 2026-09-10T03:50:23.898067903Z · JSON