CVE-2025-9076

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-9076
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9076.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-9076
Aliases
Downstream
Related
Published
2025-09-15T10:06:15Z
Modified
2026-08-12T03:51:48Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Mattermost Server exposes sensitive user credentials during shared channel membership synchronization
Details

Mattermost versions 10.10.x <= 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters to access sensitive user information via unsanitized user objects. This vulnerability affects Mattermost Server instances with shared channels enabled.

Database specific 
{
    "cna_assigner": "Mattermost",
    "cwe_ids": [
        "CWE-862"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9076.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "10.10.0"
                },
                {
                    "last_affected": "10.10.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/mattermost/mattermost

Affected ranges

Type
GIT
Repo
https://github.com/mattermost/mattermost
Events
Introduced
c8bd5c937551a4e9ad23f5a4fd8aaf7604d046dd
Fixed
70c3cb2c1eef66484d5455217295684a49b7c3f1
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "10.10.0"
        },
        {
            "fixed": "10.10.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v10.*
v10.10.0
v10.10.1
v10.10.1-rc1
v10.10.2-rc1
v10.10.2-rc2
v10.10.2-rc3
v10.10.2-rc4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9076.json"