A vulnerability described as problematic has been identified in Mattermost up to 10.11.9/11.1.2/11.2.1. This impacts an unknown function of the component Team Membership Handler. Such manipulation of the argument channel_mentions leads to missing authorization.
This vulnerability is referenced as CVE-2025-14350. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is recommended.
