Mattermost Vulnerabilities

Comprehensive security vulnerability database for Mattermost products

Last updated: Feb 16, 2026
Total CVEs

1

Critical

0

With Exploits

6

Last 30 Days

0

Severity Distribution

Critical0
0%
High0
0%
Medium7
700%
Low1
100%
DescriptionVendor / ProductExploit Status
CVE-2025-145732.7

This vulnerability allows team administrators to improperly add users to their team through API requests, even if they don't have the necessary permissions. It affects specific versions of Mattermost and requires the attacker to have administrative access to the team settings.

mattermostmattermost server
Exploit Available
about 2 months agoFeb 16, 2026

About Mattermost Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Mattermost products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.