CVE-2025-24839

Published: Apr 16, 2025Modified: Oct 2, 2025

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activate_ai override property to a post via the Wrangler plugin, provided both the AI and Wrangler plugins are enabled.

Affected (3)

Products: Mattermost: Mattermost Server

1 product

Mattermost Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mattermost Mattermost Server	From 10.4.0 to 10.4.4
Mattermost Mattermost Server	From 10.5.0 to 10.5.2
Mattermost Mattermost Server	From 9.11.0 to 9.11.10

Related CWEs

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://mattermost.com/security-updates

Source: responsibledisclosure@mattermost.com

Vendor Advisory

Timeline

No history available yet.