Skip to content
OpenAdvisories

Package · npm

mattermost-desktop

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-13321

    Mattermost Desktop App logging sensitive information and fails to clear data on server deletion

    Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the a…

    Mattermost Mattermost mattermost-desktop npm
  • Low 3.3
    CVE-2025-1398

    macOS TCC Bypass via Code Injection

    Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.

    Mattermost Mattermost mattermost-desktop npm
  • Low 3.7
    CVE-2024-39772

    Silent Desktop Screenshot Capture

    Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.

    Mattermost Mattermost mattermost-desktop npm
  • Low 2.5
    CVE-2024-45835

    Insufficient Electron Fuses Configuration

    Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access.

    Mattermost Mattermost mattermost-desktop npm
  • Low 3.8
    CVE-2024-36287

    Bypass of TCC restrictions on macOS

    Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.

    Mattermost Mattermost mattermost-desktop tcc Ubuntu npm