A vulnerability described as critical has been identified in Mattermost up to 10.5.8/10.8.3/10.9.3/10.10.0. Affected by this issue is some unknown functionality of the component File Attachment Handler. Such manipulation leads to path traversal.
This vulnerability is listed as CVE-2025-6465. The attack may be performed from a remote location. There is no available exploit.
Upgrading the affected component is recommended.
