Servers and applications
CVE-2025-32093
Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to restrict certain operations on system admins to only other system admins, which allows delegated granular administration users with the "Edit Other Users" permission to perform unauthorized modifications to system administrators via improper permission validation.
- Severity
- Medium 4.9
- Published
- 14 Apr 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.11.10, 10.4.4, 10.5.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MattermostServers and applications · cpe:a:mattermost:mattermost_server |
|