CVE-2025-36530 | Mattermost up to 9.11.17/10.5.8/10.8.3/10.9.1 Plugin Import path traversal

A vulnerability described as critical has been identified in Mattermost up to 9.11.17/10.5.8/10.8.3/10.9.1. The affected element is an unknown function of the component Plugin Import. Executing manipulation can lead to path traversal.

This vulnerability is registered as CVE-2025-36530. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.