CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. See the original NVD description below for full technical details.
CVE
CVE-2025-27715
Severity
LOW
CVSS
3.3
EPSS
0.20%
Original NVD Description
Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them.
Related CVEs
Other vulnerabilities affecting the same vendor(s)