← Database

CVE-2025-13326

LOW CVSS: 3.9 Published: 2025-12-17 Modified: 2026-06-17

Description

Mattermost Desktop App versions <6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder.

Affected Platforms

Mattermost Mattermost Desktop

Weakness Type

CWE-693

References