Go/github.com/mattermost/mattermost/server/v8 CVE-2025-41423: medium 4.3, EPSS 0.28%

Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250218121836-2b5275d87136 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250218121836-2b5275d87136

Affected

Fixed versions

Sources

• osv: GO-2025-3644#Go/github.com/mattermost/mattermost/server/v8
• nvd: CVE-2025-41423
• https://github.com/advisories/GHSA-fr22-5377-f3p7
• https://github.com/mattermost/mattermost-plugin-playbooks/commit/f9f7064e4d9f3918d66bac1f5f9eb28f0723464b
• https://github.com/mattermost/mattermost/commit/2b5275d87136f07e016c8eca09a2f004b31afc8a
• https://mattermost.com/security-updates

CVE-2025-41423 · published 2025-04-24T18:14:57Z · modified 2026-02-04T03:52:33.096072Z · JSON