Skip to content
OpenAdvisories
Medium · 4.7 CVE-2026-75025 EUVD-2026-80939GHSA-jcpq-22g2-pfpw

Mattermost Desktop local network access from server-rendered content

Published Sep 16, 2026 · Updated Sep 17, 2026 · Assigned by Mattermost

Description

Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private network resources. Thanks to game0v3r for contributing to this improvement under the Mattermost responsible disclosure policy. Mattermost Advisory ID: MMSA-2026-00698

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 6.2.2 6.3.0

References