Changeflow GovPing Data Privacy & Cybersecurity Multiple Vulnerabilities in Mattermost Desktop App
Priority review Guidance Added Final

Multiple Vulnerabilities in Mattermost Desktop App

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published security advisory CERTFR-2026-AVI-0419 alerting to multiple vulnerabilities in Mattermost Desktop App affecting versions prior to 5.13.5.0. The vulnerabilities could allow an attacker to cause unspecified security issues. Organizations using Mattermost Desktop App should consult the vendor security bulletins and apply available patches.

What changed

CERT-FR published security advisory CERTFR-2026-AVI-0419 alerting to multiple vulnerabilities in Mattermost Desktop App affecting versions prior to 5.13.5.0. The vulnerabilities were disclosed via Mattermost security bulletins MMSA-2026-00618 and MMSA-2026-00633 dated April 9, 2026. No specific technical details of the vulnerabilities were disclosed by the editor.

Organizations using Mattermost Desktop App should immediately identify affected installations, review the vendor security bulletins, and apply available patches to prevent potential exploitation. This advisory affects any organization deploying Mattermost's desktop client for team communications.

What to do next

  1. Identify Mattermost Desktop App versions in use and verify if affected
  2. Apply vendor security patches by updating to version 5.13.5.0 or later
  3. Monitor Mattermost security updates for additional patch information

Archived snapshot

Apr 10, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 10 avril 2026 N° CERTFR-2026-AVI-0419 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans Mattermost Desktop App

Gestion du document

| Référence | CERTFR-2026-AVI-0419 |
| Titre | Multiples vulnérabilités dans Mattermost Desktop App |
| Date de la première version | 10 avril 2026 |
| Date de la dernière version | 10 avril 2026 |
| Source(s) | Bulletin de sécurité Mattermost MMSA-2026-00618 du 09 avril 2026
Bulletin de sécurité Mattermost MMSA-2026-00633 du 09 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.


Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • Mattermost Desktop App versions antérieures à 5.13.5.0

Résumé

De multiples vulnérabilités ont été découvertes dans Mattermost Desktop App. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation


Gestion détaillée du document

  1. le 10 avril 2026 Version initiale

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
CERT-FR
Published
April 10th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0419

Who this affects

Applies to
Technology companies Organizations
Industry sector
5112 Software & Technology
Activity scope
Software vulnerability patching Security update deployment
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Software & Technology

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!