CVE-2025-58084: Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has…

PriorityP433medium6.5CVSS 3.1

AVNACLPRNUIRSUCNINAH

EPSS

0.28%

19.5th percentile

Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost	<= 5.13.0	—
mattermost	mattermost_desktop	< 5.13.1.0	5.13.1.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.