Security Advisory
CVE-2025-11776
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Mattermost versions <11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the `/api/v4/teams/{team_id}/channels/search_archived` endpoint