A vulnerability labeled as critical has been found in Mautic up to 4.4.16/5.2.7/6.0.4. The impacted element is an unknown function of the component SummaryUsers. Executing manipulation can lead to server-side request forgery.

This vulnerability appears as CVE-2025-9821. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.