Security Advisory

CVE-2025-11776

4.3
MEDIUM

Vulnerability Description

Mattermost versions <11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the `/api/v4/teams/{team_id}/channels/search_archived` endpoint
Published Date November 14, 2025
Official Source NIST NVD Advisory