CVE-2025-20051 | Mattermost up to 9.11.7/10.2.2/10.3.2/10.4.1 Block path traversal

A vulnerability was found in Mattermost up to 9.11.7/10.2.2/10.3.2/10.4.1. It has been declared as critical. This vulnerability affects unknown code of the component Block Handler. The manipulation leads to path traversal.

This vulnerability was named CVE-2025-20051. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.