CVE-2025-12756
unknown
CVSS v3
—
CVSS v2
—
VIR risk
—
Description
Mattermost fails to validate user permissions when deleting comments in Boards in github.com/mattermost/mattermost
Predictions
Exploit likelihood
30%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Go | github.com/mattermost/mattermost/server/v8 | <=8.0.0-20251013062617-7977e7e6dae3 | |
| Go | github.com/mattermost/mattermost | >=10.11.0,<=10.11.4 | |
| Go | github.com/mattermost/mattermost | >=10.12.0,<=10.12.1 | |
| Go | github.com/mattermost/mattermost | >=10.5.0,<=10.5.12 | |
| Go | github.com/mattermost/mattermost | >=11.0.0,<=11.0.2 | |
| Go | github.com/mattermost/mattermost | | |
| Go | github.com/mattermost/mattermost | >=10.5.0+incompatible | |
| Go | github.com/mattermost/mattermost | >=10.11.0+incompatible | |
| Go | github.com/mattermost/mattermost | >=10.12.0+incompatible | |
| Go | github.com/mattermost/mattermost-server | | |
| Go | github.com/mattermost/mattermost-server/v5 | | |
| Go | github.com/mattermost/mattermost-server/v6 | | |
| Go | github.com/mattermost/mattermost/server/v8 | | |
References
Verify integrity in audit chain (admin only). AS-IS.