CyberRota Analysis
AI-GeneratedThe Mattermost Desktop App versions up to 6.2.2.0 are vulnerable due to inadequate validation of the IPC sender in the leaveCall handler, enabling a malicious server or user with script access to disconnect active calls from other connected servers. This could lead to disruptions in communication for users relying on the platform for collaboration. Organizations using this version of the Mattermost Desktop App should prioritize addressing this vulnerability to mitigate potential service interruptions.
Original NVD Description
Mattermost Desktop App versions <=6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server (or a user with script access to a connected server view) to disconnect an active call belonging to a different connected server via the desktopAPI.leaveCall IPC message. Mattermost Advisory ID: MMSA-2026-00699
Related CVEs
Other vulnerabilities affecting the same vendor(s)