Mattermost security advisory (AV25-364) - Canadian Centre for Cyber Security

Mattermost disclosed a critical vulnerability affecting multiple versions of Mattermost Server. CVE-2025-4981 could allow authenticated users to perform remote code execution via a path traversal flaw in the archive extractor.