← Database

CVE-2025-1398

LOW CVSS: 3.3 Published: 2025-03-17 Modified: 2026-06-17

Description

Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.

Affected Platforms

Apple MacosMattermost Mattermost Desktop

Weakness Type

CWE-426

References