CVE-2024-36287

LOW

Mattermost Desktop App <=5.7.0 - Auth Bypass

Title source: llm

Description

Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.

References (1)

Scores

CVSS v3 3.8
EPSS 0.0003
EPSS Percentile 7.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Classification

CWE
CWE-693
Status published

Affected Products (2)

mattermost/mattermost_desktop < 5.7.0
npm/mattermost-desktop < 5.8.0npm

Timeline

Published Jun 14, 2024
Tracked Since Feb 18, 2026