CVE-2025-30179: MFA Enforcement Bypass in Search APIs

Q: What is the severity of CVE-2025-30179?

CVE-2025-30179 is considered a medium severity vulnerability due to its ability to allow authenticated attackers to bypass MFA protections.

Q: How do I fix CVE-2025-30179?

To fix CVE-2025-30179, upgrade Mattermost to version 10.4.3 or higher, 10.3.4 or higher, or 9.11.9 or higher.

Q: Which versions of Mattermost are affected by CVE-2025-30179?

CVE-2025-30179 affects Mattermost versions up to and including 10.4.2, 10.3.3, and 9.11.8.

Q: What type of attacks can exploit CVE-2025-30179?

CVE-2025-30179 can be exploited by authenticated attackers using user, channel, or team search queries to bypass MFA.

Q: Does CVE-2025-30179 allow unauthorized access?

CVE-2025-30179 does not grant unauthorized access; it allows authenticated users to bypass MFA on specific search APIs.

Published Mar 21, 2025

Updated

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries.

Affected Software

8 affected componentsFixes available

Mattermost Mattermost<=10.4.2, <=10.3.3, <=9.11.8

go/github.com/mattermost/mattermost/server/v8=10.5.0

10.5.1

go/github.com/mattermost/mattermost/server/v8>=9.11.0<9.11.9

9.11.9

go/github.com/mattermost/mattermost/server/v8>=10.3.0<10.3.4

10.3.4

go/github.com/mattermost/mattermost/server/v8>=10.4.0<10.4.3

10.4.3

Mattermost Mattermost Server>=9.11.0<9.11.9

Mattermost Mattermost Server>=10.3.0<10.3.4

Mattermost Mattermost Server>=10.4.0<10.4.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade go/github.com/mattermost/mattermost/server/v8 to a version that resolves this vulnerability.
Fixed in 10.5.1
Upgrade
Upgrade go/github.com/mattermost/mattermost/server/v8 to a version that resolves this vulnerability.
Fixed in 9.11.9
Upgrade
Upgrade go/github.com/mattermost/mattermost/server/v8 to a version that resolves this vulnerability.
Fixed in 10.3.4
Upgrade
Upgrade go/github.com/mattermost/mattermost/server/v8 to a version that resolves this vulnerability.
Fixed in 10.4.3
Upgrade
Upgrade Mattermost to a version that resolves this vulnerability.
Fixed in 10.5.0
Upgrade
Upgrade Mattermost to a version that resolves this vulnerability.
Fixed in 10.4.3
Upgrade
Upgrade Mattermost to a version that resolves this vulnerability.
Fixed in 10.3.4
Upgrade
Upgrade Mattermost to a version that resolves this vulnerability.
Fixed in 9.11.9

Event History

Mar 21, 2025

CVE Published

via MITRE·08:24 AM

Data Sourced

via MITRE·08:24 AM

RemedyDescriptionSeverityWeakness

Advisory Published

via GitHub·09:30 AM

Frequently Asked Questions

What is the severity of CVE-2025-30179?

CVE-2025-30179 is considered a medium severity vulnerability due to its ability to allow authenticated attackers to bypass MFA protections.

How do I fix CVE-2025-30179?