CVE-2025-55035: Mattermost Desktop DoS when user has basic authentication server configured
Mattermost Desktop App versions <=5.13.0 fail to manage modals in the Mattermost Desktop App that stops a user with a server that uses basic authentication from accessing their server which allows an attacker that provides a malicious server to the user to deny use of the Desktop App via having the user configure the malicious server and forcing a modal popup that cannot be closed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Mattermost Desktop Appto a version that resolves this vulnerability.Fixed in 5.13.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55035?
CVE-2025-55035 is classified as a high severity vulnerability due to its potential to disrupt user access to the Mattermost Desktop App.
How do I fix CVE-2025-55035?
To fix CVE-2025-55035, you should upgrade Mattermost Desktop App to a version greater than 5.13.0.
What are the implications of CVE-2025-55035?
The implications of CVE-2025-55035 include users being unable to access their server if a malicious server is provided, potentially leading to denial of service.
Who is affected by CVE-2025-55035?
Users of Mattermost Desktop App versions 5.13.0 and below that utilize basic authentication are affected by CVE-2025-55035.
Is there a workaround for CVE-2025-55035 until I can update?
Currently, there are no known workarounds for CVE-2025-55035, so updating is the recommended action.