CVE-2025-41443

3 advisories.

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-41443: medium 4.3, EPSS 0.31%

Mattermost has a Missing Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250822090405-e8c7e7d0252b or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250822090405-e8c7e7d0252b

introduced	fixed	last affected
0	8.0.0-20250822090405-e8c7e7d0252b	-

8.0.0-20250822090405-e8c7e7d0252b

CVE-2025-41443 · published 2025-10-16T09:30:24Z · modified 2025-11-05T19:57:38.536178Z · JSON

Mattermost has a Missing Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost-server to 10.5.11 or later.

go get github.com/mattermost/mattermost-server@v10.5.11

go get github.com/mattermost/mattermost-server@v10.11.3

introduced	fixed	last affected
10.5.0	10.5.11	-
10.11.0	10.11.3	-

10.5.11

10.11.3

CVE-2025-41443 · published 2025-10-16T09:30:24Z · modified 2025-11-05T19:57:38.536178Z · JSON

Guest user can discover active public channels in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2025-41443 · published 2025-10-30T15:02:33Z · modified 2026-03-03T04:57:01.188010Z · JSON