Go/github.com/mattermost/mattermost-plugin-boards CVE-2025-9081: medium 6.5, EPSS 0.27%

Mattermost boards plugin fails to restrict download access to files in github.com/mattermost/mattermost-plugin-boards

Action: Upgrade github.com/mattermost/mattermost-plugin-boards to 0.0.0-20250716054606-3f3e3becfe1d or later.

go get github.com/mattermost/mattermost-plugin-boards@v0.0.0-20250716054606-3f3e3becfe1d

Affected

Fixed versions

Sources

• osv: GO-2025-3978
• nvd: CVE-2025-9081
• https://github.com/advisories/GHSA-f72g-52v7-mg3p
• https://github.com/mattermost/mattermost-plugin-boards/commit/3f3e3becfe1d66db0d0f4fd235f04afd6e1ec40b
• https://github.com/mattermost/mattermost-plugin-boards/pull/114
• https://mattermost.com/security-updates

CVE-2025-9081 · published 2025-09-24T19:21:41Z · modified 2026-03-03T04:57:28.885214Z · JSON