CVE-2024-39613

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions <=5.8.0

Description The Mattermost Desktop App fails to specify an absolute path when searching for the cmd.exe file, allowing a local attacker who can place a cmd.exe file in the user's Downloads folder to cause remote code execution on that machine. A local attacker can exploit this issue by putting a malicious cmd.exe file in the Downloads folder, leading to remote code execution.

Recommendations For Mattermost Desktop App versions <=5.8.0, upgrade to version 5.9.0 to resolve the issue. As a temporary workaround, consider restricting access to the Downloads folder to minimize the risk of exploitation.