CVE-2026-75025: Mattermost

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private network resources. Thanks to game0v3r for contributing to this improvement under the Mattermost responsible disclosure policy. Mattermost Advisory ID: MMSA-2026-00698

Affected products

• Mattermost Mattermost: up to and including 6.2.2

Published 2026-09-16. Last modified 2026-09-17.