LOW 3.5 Go
Mattermost Lack of Access Control Validation
GHSA-pwvr-grqg-7vp2 · CVE-2025-49810 · GO-2025-3903
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Mattermost versions 10.5.x <= 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts
Ready to move
Start Securing
Free, no credit card | First findings in minutes