---
id: CVE-2025-13321
title: >-
  Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information
  from Mattermost logs and clear data on server deletion which allows an
  attacker with access to the users system to gain access to potentially
  sensitive informa…
summary: >-
  Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information
  from Mattermost logs and clear data on server deletion which allows an
  attacker with access to the users system to gain access to potentially
  sensitive informa…
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-532
vendor: mattermost
product: mattermost_desktop
affected:
  - mattermost_desktop < 6.0.0
patched:
  - mattermost_desktop 6.0.0
published: '2025-12-17'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T11:10:00.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-13321'
references:
  - url: 'https://mattermost.com/security-updates'
    label: responsibledisclosure@mattermost.com
tags:
  - nvd
epss: 0.00119
epssPercentile: 0.0163
ingestedAt: '2026-10-13T11:23:51.122Z'
---

## Overview

Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs.

## Affected

- `mattermost_desktop < 6.0.0`

## Remediation

Upgrade past the affected range:

- `mattermost_desktop 6.0.0`