Go/github.com/mattermost/mattermost/server/v8 CVE-2025-24526: medium 4.3, EPSS 0.29%

Mattermost fails to restrict channel export of archived channels in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250110161910-96195f1bd746 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250110161910-96195f1bd746

Affected

Fixed versions

Sources

• osv: GO-2025-3481#Go/github.com/mattermost/mattermost/server/v8
• nvd: CVE-2025-24526
• https://github.com/advisories/GHSA-q8p2-2hwc-jw64
• https://github.com/mattermost/mattermost-plugin-channel-export/commit/3c052b66207fb734bfc4c948941e7f7522a82550
• https://github.com/mattermost/mattermost-plugin-channel-export/issues/51
• https://github.com/mattermost/mattermost/commit/96195f1bd7467f572525c35b5087acaeb53daa63
• https://mattermost.com/security-updates

CVE-2025-24526 · published 2025-03-03T19:22:09Z · modified 2026-02-04T03:54:57.324889Z · JSON