The Mattermost Desktop App is a native client for the Mattermost open-source messaging and collaboration platform. It allows users to create and participate in chat rooms, integrate with online services, and operate in private chats separate from the main server. The app supports Windows, Mac and Linux operating systems and its functionality is similar to messaging apps like Slack.

Mattermost Desktop App

Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-1046	MEDIUM	6.5	Mattermost Desktop App	cpe:2.3:a:mattermost:mattermost_desktop	No	Yes	Feb 16, 2026
CVE-2025-55035	MEDIUM	6.1	Mattermost Desktop App	cpe:2.3:a:mattermost:mattermost_desktop	No	Yes	Oct 16, 2025
CVE-2026-1628	MEDIUM	4.6	Mattermost Desktop App	cpe:2.3:a:mattermost:mattermost_desktop	No	Yes	Mar 02, 2026
CVE-2025-13326	LOW	3.9	Mattermost Desktop App	cpe:2.3:a:mattermost:mattermost_desktop	No	Yes	Dec 17, 2025
CVE-2025-13321	LOW	3.3	JavaScript	mattermost-desktop	No	Yes	Dec 17, 2025

CVE-2026-1046:
Mattermost Desktop App vulnerability analysis and mitigation

6.5

Related Mattermost Desktop App vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2026-1046: Mattermost Desktop App vulnerability analysis and mitigation