| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 10.11.0, < 10.11.11 | 10.11.11 |
Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members to guest role. Mattermost Advisory ID: MMSA-2025-00531
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free