{"data":{"id":"c3ae87ab-a5d4-44d9-8e5c-9258faff0870","title":"CVE-2025-31363: Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request…","summary":"Mattermost versions 10.4.x up to and including 10.4.2, 10.5.x up to and including 10.5.0, and 9.11.x up to and including 9.11.9 fail to restrict which domains the LLM can request to contact upstream. An authenticated user can perform a prompt injection through the AI plugin's Jira tool to exfiltrate data from any server reachable by the victim.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-31363","publishedAt":"2025-04-16T10:15:15.170Z","cveId":"CVE-2025-31363","cweIds":null,"cvssScore":"3","cvssSeverity":"low","severity":"low","attackType":["prompt_injection","data_extraction"],"issueType":"vulnerability","affectedPackages":["github.com/mattermost/mattermost/server/v8@>= 10.5.0, < 10.5.1 (fixed: 10.5.1)","github.com/mattermost/mattermost/server/v8@>= 10.4.0, < 10.4.3 (fixed: 10.4.3)","github.com/mattermost/mattermost/server/v8@>= 9.11.0, < 9.11.10 (fixed: 9.11.10)","github.com/mattermost/mattermost/server/v8@< 8.0.0-20250218121836-2b5275d87136 (fixed: 8.0.0-20250218121836-2b5275d87136)"],"affectedPackageNames":["github.com/mattermost/mattermost/server/v8"],"affectedPackageRefs":["go:github.com/mattermost/mattermost/server/v8"],"affectedVendors":[],"affectedVendorsRaw":["Mattermost AI plugin","Jira tool"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mattermost AI plugin unrestricted LLM domain requests enabling data exfiltration","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00288,"epssCheckedAt":"2026-11-04T18:09:12.971Z","kevDateAdded":null,"advisoryAliases":["GHSA-9h6j-4ffx-cm84"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:57.612Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-02-18T12:18:36.000Z","daysToFix":-57,"fixCheckedAt":"2026-10-29T21:44:44.516Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"go","name":"github.com/mattermost/mattermost/server/v8","fixedVersion":"10.5.1","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":null,"status":"package_not_found","checkedAt":"2026-10-29T21:44:44.364Z"},{"ecosystem":"go","name":"github.com/mattermost/mattermost/server/v8","fixedVersion":"9.11.10","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":null,"status":"package_not_found","checkedAt":"2026-10-29T21:44:44.364Z"},{"ecosystem":"go","name":"github.com/mattermost/mattermost/server/v8","fixedVersion":"10.4.3","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":null,"status":"package_not_found","checkedAt":"2026-10-29T21:44:44.364Z"},{"ecosystem":"go","name":"github.com/mattermost/mattermost/server/v8","fixedVersion":"8.0.0-20250218121836-2b5275d87136","matchedVersion":"v8.0.0-20250218121836-2b5275d87136","fixReleasedAt":"2025-02-18T12:18:36.000Z","daysToFix":-57,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:44:44.364Z"}]}}