Go/github.com/mattermost/mattermost/server/v8 CVE-2025-20051: medium 6.5, EPSS 0.61%

Mattermost allows reading arbitrary files in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250122165010-4ed702ccff4e or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250122165010-4ed702ccff4e

Affected

Fixed versions

Sources

• osv: GO-2025-3483#Go/github.com/mattermost/mattermost/server/v8
• nvd: CVE-2025-20051
• https://github.com/advisories/GHSA-v469-7wp6-7cvp
• https://github.com/mattermost/mattermost-plugin-boards/commit/025ce8d363a054473bc002f43f602a4032d38c06
• https://github.com/mattermost/mattermost/commit/4ed702ccff4ec3c9eff832a9b6060f9f4454141d
• https://mattermost.com/security-updates

CVE-2025-20051 · published 2025-03-03T19:22:09Z · modified 2026-02-04T03:24:57.485036Z · JSON