https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:26:35.547490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-1412 CVE-2025-1412 — Session Persistence After User-to-Bot Conversion 2026-10-05T21:26:35.553113+00:00

Affected: Mattermost

Mattermost versions 9.11.x <= 9.11.6, 10.4.x <= 10.4.1 fail to invalidate all active sessions when converting a user to a bot, with allows the converted user to escalate their privileges depending on the permissions granted to the bot.