Security Advisory

CVE-2025-55074

3
LOW

Vulnerability Description

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects
Published Date November 18, 2025
Official Source NIST NVD Advisory