# Mattermost in August 2025: incidents, uptime and changes

> Mattermost in August 2025: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 22 CVEs. From Rewindex’s archive of Mattermost’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/mattermost/2025/08
Last updated: 2026-06-17T10:06:53Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 22
- Previous month: [July 2025](https://rewindex.com/company/mattermost/2025/07.md) · Next: [September 2025](https://rewindex.com/company/mattermost/2025/09.md) · [All months](https://rewindex.com/company/mattermost/reports.md) · [Mattermost](https://rewindex.com/company/mattermost.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2025-44001](https://rewindex.com/cve/CVE-2025-44001.md) Unauthorized Channel Subscription Read in Mattermost Confluence Plugin (CVSS 4.0), published 2025-08-11
- [CVE-2025-44004](https://rewindex.com/cve/CVE-2025-44004.md) Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 7.2), published 2025-08-11
- [CVE-2025-48731](https://rewindex.com/cve/CVE-2025-48731.md) Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin (CVSS 6.4), published 2025-08-11
- [CVE-2025-49221](https://rewindex.com/cve/CVE-2025-49221.md) Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin (CVSS 3.7), published 2025-08-11
- [CVE-2025-52931](https://rewindex.com/cve/CVE-2025-52931.md) Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5), published 2025-08-11
- [CVE-2025-53514](https://rewindex.com/cve/CVE-2025-53514.md) Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 5.9), published 2025-08-11
- [CVE-2025-53857](https://rewindex.com/cve/CVE-2025-53857.md) Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin (CVSS 3.7), published 2025-08-11
- [CVE-2025-53910](https://rewindex.com/cve/CVE-2025-53910.md) Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 4.0), published 2025-08-11
- [CVE-2025-54458](https://rewindex.com/cve/CVE-2025-54458.md) Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin (CVSS 5.0), published 2025-08-11
- [CVE-2025-54463](https://rewindex.com/cve/CVE-2025-54463.md) Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 5.9), published 2025-08-11
- [CVE-2025-54478](https://rewindex.com/cve/CVE-2025-54478.md) Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 7.2), published 2025-08-11
- [CVE-2025-54525](https://rewindex.com/cve/CVE-2025-54525.md) Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5), published 2025-08-11
- [CVE-2025-8285](https://rewindex.com/cve/CVE-2025-8285.md) Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 4.0), published 2025-08-11
- [CVE-2025-36530](https://rewindex.com/cve/CVE-2025-36530.md) Import Path Traversal Enables Unauthorized Unsigned Plugin Installation (CVSS 6.8), published 2025-08-21
- [CVE-2025-49810](https://rewindex.com/cve/CVE-2025-49810.md) Thread summarization allows persistent access to channel (CVSS 3.5), published 2025-08-21
- [CVE-2025-47700](https://rewindex.com/cve/CVE-2025-47700.md) AI plugin APIs can be triggered using post actions (CVSS 3.5), published 2025-08-21
- [CVE-2025-53971](https://rewindex.com/cve/CVE-2025-53971.md) Channel and Team Membership APIs inadvertently allow loss of Member privileges. (CVSS 3.8), published 2025-08-21
- [CVE-2025-8023](https://rewindex.com/cve/CVE-2025-8023.md) Path Traversal in Template Upload Allows Uploading Files Outside Target Directory (CVSS 6.8), published 2025-08-21
- [CVE-2025-49222](https://rewindex.com/cve/CVE-2025-49222.md) Mattermost Shared Channel Upload Type Validation Bypass (CVSS 6.8), published 2025-08-21
- [CVE-2025-47870](https://rewindex.com/cve/CVE-2025-47870.md) Team invite ID leaked to team admin with no member invite privileges (CVSS 4.3), published 2025-08-21
- [CVE-2025-6465](https://rewindex.com/cve/CVE-2025-6465.md) Path traversal in image upload with preview overwrite (CVSS 4.3), published 2025-08-21
- [CVE-2025-8402](https://rewindex.com/cve/CVE-2025-8402.md) Nil pointer dereference in bulk import crashes server (CVSS 4.9), published 2025-08-21

## Cite this

Mattermost posted 0 status incidents in August 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/mattermost/2025/08
- Citation: Mattermost, “Mattermost in August 2025” (2025-08-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/mattermost/2025/08 (CC BY 4.0).
- Markdown link: `[Mattermost: Mattermost in August 2025 (2025-08-01)](https://rewindex.com/company/mattermost/2025/08)`


---
Canonical: https://rewindex.com/company/mattermost/2025/08 · Markdown: https://rewindex.com/company/mattermost/2025/08.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T15:28:37.264Z