Skip to contentMattermost Desktop vulnerabilities
- mattermost, mattermost desktop +1 moreMattermost Desktop App Missing IPC Sender Validation in Calls Leave HandlerCVE-2026-122843.8 Low
- mattermost, mattermost desktop +1 moreMattermost Desktop App plugin popout scheme validation bypassCVE-2026-755882.6 Low
- mattermost, mattermost desktop +1 moreMattermost Desktop local network access from server-rendered contentCVE-2026-750254.7 Medium
- mattermost, mattermost desktop +1 morePlaintext pre-auth secret exposure via Desktop App diagnostics reportCVE-2026-755873.6 Low
- mattermost, mattermost desktop +1 morePosting a malicious markdown image crashes the Mattermost Desktop AppCVE-2026-80756.5 Medium
- mattermost, mattermost desktop +1 moreMattermost Desktop App crashes when malformed arguments are provided to some exposed IPC methodsCVE-2026-96025.7 Medium
- mattermost, mattermost desktop +1 moreOverly long URLs crash the Mattermost Desktop AppCVE-2026-86836.5 Medium
- mattermost, mattermost desktop +1 moreMattermost Desktop App fails to restrict the allow list of domains which NTLM credentials are passedCVE-2026-65176.3 Medium
- mattermost, mattermost desktop +1 moreOpening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop AppCVE-2026-34716.5 Medium
- mattermost, mattermost desktop +1 moreCalling window.close() from server-side content causes crash in the Mattermost Desktop AppCVE-2026-46433.5 Low
- mattermost, mattermost desktop +1 moreMattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites.CVE-2026-16284.6 Medium
- mattermost, mattermost desktop +1 moreArbitrary application execution via unvalidated server-controlled URLs in Help menuCVE-2026-10467.6 High
- mattermost, mattermost desktop +1 moreMattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App StoreCVE-2025-133263.9 Low
- mattermost, mattermost desktop +1 moreMattermost Desktop App logging sensitive information and fails to clear data on server deletionCVE-2025-133213.3 Low
- mattermost, mattermost desktop +1 moreMattermost Desktop DoS when user has basic authentication server configuredCVE-2025-550356.1 Medium
- mattermost, mattermost desktop +1 moreMattermost Desktop App crashes when clicking on malformed external URLCVE-2025-580843.5 Low
- mattermost, mattermost desktop +1 moremacOS TCC Bypass via Code InjectionCVE-2025-1398Fix available3.3 Low
- mattermost, mattermost desktop +1 moreInsufficient Electron Fuses ConfigurationCVE-2024-45835Fix available2.5 Low
- mattermost, mattermost desktop +1 moreSilent Desktop Screenshot CaptureCVE-2024-39772Fix available3.7 Low
- mattermost, mattermost desktop +1 moreRCE in desktop app in Windows by local attackerCVE-2024-39613Fix available5.3 Medium
- mattermost, mattermost desktop +1 moreLack of permissions prompting when opening external URLsCVE-2024-37182Fix available4.7 Medium
- mattermost, mattermost desktop +1 moreBypass of TCC restrictions on macOSCVE-2024-36287Fix available3.8 Low
- mattermost desktopLack Of Secure Keyboard Entry Protection in MacOS DesktopCVE-2023-59202.9 Low
- mattermost desktopLack of Hardening against media exploitation from a remote originCVE-2023-58753.7 Low
- mattermost desktopRegex DoS from a malicious server enrolled in DesktopCVE-2023-58763.1 Low
- mattermost, mattermost desktop +1 moreMattermost Desktop logs all keystrokes during initial run after fresh installationCVE-2023-53394.7 Medium
- mattermost, mattermost desktop +1 moreUnrestricted navigation due to unvalidated mattermost server redirectionCVE-2023-20005.4 Medium
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code...CVE-2016-110649.8 Critical
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin...CVE-2018-212655.3 Medium
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.2.2. It allows attackers to execute...CVE-2019-208618.8 High
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection.CVE-2019-208569.8 Critical
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is...CVE-2020-144567.3 High
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic...CVE-2020-144556.5 Medium
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in...CVE-2020-144546.1 Medium