CVE-2025-25279
Critical · 9.9Mattermost allows reading arbitrary files related to importing boards
CVSS
9.9
EPSS
24.2%
Published
Feb 24, 2025
CISA due date
—
The record
Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a specially crafted import archive in Boards.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/mattermost/mattermost-server | 9.11.0-rc1+incompatible | 9.11.8+incompatible |
| Go | github.com/mattermost/mattermost-server/v5 | 0 | No fix |
| Go | github.com/mattermost/mattermost-server/v6 | 0 | No fix |
| Go | github.com/mattermost/mattermost/server/v8 | 0 | 8.0.0-20250122165010-4ed702ccff4e |
| Go | github.com/mattermost/mattermost/server/v8 | 10.2.0-rc1 | 10.2.3 |
| Go | github.com/mattermost/mattermost/server/v8 | 10.3.0-rc1 | 10.3.3 |
| Go | github.com/mattermost/mattermost/server/v8 | 10.4.0-rc1 | 10.4.2 |
| Go | github.com/mattermost/mattermost/server/v8 | 9.11.0-rc1 | 9.11.8 |
| Chainguard | mattermost-10.0 | 0 | 10.0.4-r6 |
| Chainguard | mattermost-10.0-compat | 0 | 10.0.4-r6 |
| Chainguard | mattermost-10.1 | 0 | 10.1.7-r3 |
| Chainguard | mattermost-10.1-compat | 0 | 10.1.7-r3 |
| Chainguard | mattermost-10.2 | 0 | 0 |
| Chainguard | mattermost-10.2-compat | 0 | 0 |
| Chainguard | mattermost-fips-10.5 | 0 | 0 |
| Chainguard | mattermost-fips-10.5-compat | 0 | 0 |
| Chainguard | mattermost-fips-10.6 | 0 | 0 |
| Chainguard | mattermost-fips-10.6-compat | 0 | 0 |
| Chainguard | mattermost-fips-10.7 | 0 | 10.7.1-r1 |
| Chainguard | mattermost-fips-10.7-compat | 0 | 10.7.1-r1 |
| Chainguard | mattermost-fips-9.11 | 0 | 0 |
| Chainguard | mattermost-fips-9.11-compat | 0 | 0 |
| Wolfi | mattermost-10.0 | 0 | 10.0.4-r6 |
| Wolfi | mattermost-10.0-compat | 0 | 10.0.4-r6 |
| Wolfi | mattermost-10.1 | 0 | 10.1.7-r3 |
| Wolfi | mattermost-10.1-compat | 0 | 10.1.7-r3 |
| Wolfi | mattermost-10.2 | 0 | 0 |
| Wolfi | mattermost-10.2-compat | 0 | 0 |
| go | github.com/mattermost/mattermost/server/v8 | 10.2.0-rc1 | 10.2.3 |
| go | github.com/mattermost/mattermost/server/v8 | 10.3.0-rc1 | 10.3.3 |
| go | github.com/mattermost/mattermost/server/v8 | 10.4.0-rc1 | 10.4.2 |
| go | github.com/mattermost/mattermost/server/v8 | 9.11.0-rc1 | 9.11.8 |
| openSUSE:Tumbleweed | govulncheck-vulndb | 0 | 0.0.20250312T181707-1.1 |
Related vulnerabilities
- GO-2026-4305 Mattermost Server vulnerable to CSRF if CORS is enabled in… Also affects github.com/mattermost/mattermost-server
- GO-2025-4259 Mattermost doesn't validate user channel membership when attaching Mattermost posts as… Also affects github.com/mattermost/mattermost-server
- GO-2025-4260 Mattermost doesn't verify that post actions invoking `/share-issue-publicly` were created… Also affects github.com/mattermost/mattermost-server
- GO-2026-4282 Mattermost Server is vulnerable to channel invisibility DoS via misformatted post in… Also affects github.com/mattermost/mattermost-server
- GO-2026-4326 Mattermost is vulnerable to DoS due to infinite re-renders on API errors in… Also affects github.com/mattermost/mattermost-server
- GO-2026-4325 Mattermost is vulnerable to CPU exhaustion via crafted HTTP request in… Also affects github.com/mattermost/mattermost-server
- GO-2026-4496 Mattermost doesn't validate user permissions when creating Jira issues from Mattermost… Also affects github.com/mattermost/mattermost-server
- GO-2026-4520 Mattermost fails to properly validate login method restrictions in… Also affects github.com/mattermost/mattermost-server