A vulnerability identified as problematic has been detected in Mattermost up to 10.5.10/10.11.2. This vulnerability affects unknown code of the file /api/v4/teams/{team_id}/channels/ids of the component Guest User Permission Handler. This manipulation causes missing authorization.
This vulnerability is handled as CVE-2025-41443. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.