CVE-2024-37182: Mattermost Desktop

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes.

Affected products

• Mattermost Mattermost Desktop: up to and including 5.7.0

Published 2024-06-14. Last modified 2026-06-17.