CVE-2026-75025 — Mattermost Desktop local network access from server-rendered content
Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private netwo…
Published: 2026-09-16 · CVSS: 4.7 · CVSS 3.1
Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private network resources. Thanks to game0v3r for contributing to this improvement under the Mattermost responsible disclosure policy. Mattermost Advisory ID: MMSA-2026-00698
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7