UpHeron
All vulnerabilities

Servers and applications

CVE-2025-41436

Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads

Severity
Medium 4.3
Published
14 Nov 2025
Last changed
19 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
11.0.0
Sources
NVD

Affected software

SoftwareAffected versions
MattermostServers and applications · cpe:a:mattermost:mattermost_server
  • Every version before 11.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-41436
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-41436