CVE-2025-13326CWE-693

CVE-2025-13326

Low · published December 18, 2025

CVSS v3.1
3.9
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

Mattermost Desktop App versions <6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2025-12-18T00:16Z
Affected products (1)
ProductVersionsFixed in
mattermost/mattermost_desktop< 6.0.06.0.0
References (1)
https://mattermost.com/security-updates · [email protected]
EPSS history
Timeline
  • 17 DEC 18:14Z
    Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store
    cvelistv5