Security Advisory

CVE-2025-13326

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-17 18:14:14
Last updated 2025-12-17 19:29:30
Assigner Mattermost
State PUBLISHED

Description

Mattermost Desktop App versions <6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder.