Security Advisory
CVE-2025-55070
6.5
MEDIUM
Vulnerability Description
Mattermost versions <11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events
Published Date
November 14, 2025
Official Source
NIST NVD Advisory