CyberzSOC

If exploited, these vulnerabilities could allow an authenticated attacker to read any file on the server, or read data directly from the It is recommended to check for potential abuse, and to update vulnerable Mattermost instances. The vulnerability CVE-2025-25279, with a CVSS score of 9.9, arises due to a failure to validate board blocks during import processes. An attacker can exploit this vulnerability by importing a specially crafted archive. Upon successful exploitation, the attacker can read arbitrary files on The vulnerability CVE-2025-20051, with a CVSS score of 9.9, arises due to a failure to validate user input during the patching and duplication of a board. Maliciously crafted blocks can be used to read arbitrary files on the system by an attacker [3].