What’s Vulnerable › Products

Mattermost Mobile vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Mattermost Mobile version is affected

Latest Mattermost Mobile vulnerabilities

• CVE-2026-22880 — Mobile SSO authentication flow allows credential theft via malicious server (CVSS 6.1)
• CVE-2025-59480 — Inadequate validation of SSO redirect credentials permits credential theft (CVSS 6.5)
• CVE-2025-30516 — Unauthorized Notification Exposure in Mobile App Under Specific Conditions (CVSS 7.5)
• CVE-2025-1558 — Denial of Service Via Malicious GIF (CVSS 6.5)
• CVE-2025-20630 — Mobile crash via object that can't be cast to String in Attachment Field (CVSS 7.5)
• CVE-2025-20072 — Mobile crash via improper validation of proto style in attachments (CVSS 7.5)
• CVE-2025-0476 — Mobile crash via file with specially crafted filename (CVSS 4.3)
• CVE-2025-21083 — Insufficient Input Validation on Post Props (CVSS 6.5)
• CVE-2025-20036 — Insufficient Input Validation on Post Props (CVSS 6.5)
• CVE-2024-11358 — Insecure Android File Provider Paths (CVSS 5.5)
• CVE-2024-45833 — Mobile password gets saved in dictionary under conditions (CVSS 6.5)
• CVE-2024-39767 — Spoofed push notifications from malicious server (CVSS 6.5)
• CVE-2024-32945 — LaTeX post content manipulation via renderer state leak across contexts (CVSS 5.3)
• CVE-2024-3872 — (CVSS 6.5)
• CVE-2024-24975 — Denial of Service for mobile app users due to automatic code highlighting (CVSS 6.5)
• CVE-2019-20852 — (CVSS 7.5)
• CVE-2020-14451 — (CVSS 7.5)
• CVE-2020-14449 — (CVSS 7.5)
• CVE-2019-20850 — (CVSS 5.3)
• CVE-2019-20849 — (CVSS 5.3)
• CVE-2019-20848 — (CVSS 7.5)