← Database

CVE-2025-11776

MEDIUM CVSS: 4.3 Published: 2025-11-14 Modified: 2026-06-17

Description

Mattermost versions <11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the `/api/v4/teams/{team_id}/channels/search_archived` endpoint

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-863

References