Mattermost Server SSRF Vulnerability via the Agents Plugin in github.com/mattermost/mattermost-server

The SSRF vulnerability in Mattermost Server's Agents Plugin allows an attacker to craft malicious requests that the server will execute on their behalf. This could lead to the attacker accessing internal services or data that are not directly exposed to the internet. For example, an attacker could potentially scan internal networks, access cloud metadata services, or interact with internal APIs. The impact is considered LOW due to the need for specific plugin configuration and potential limitations in the attacker's ability to control the target of the SSRF requests. While not immediately catastrophic, successful exploitation could provide a foothold for further attacks or data exfiltration.

Organizations utilizing Mattermost Server with the Agents Plugin enabled are at risk. This includes teams relying on the Agents Plugin for integrations with external services or internal systems. Environments with less stringent network segmentation policies are particularly vulnerable.

• go / server:

ps aux | grep "mattermost" | grep "Agents Plugin"

• generic web:

curl -I https://<mattermost_server>/plugins/agents/  # Check for unexpected responses or headers

1. 2025-08-29Disclosure

   disclosure

1. Reserviert2025-07-22
2. Veröffentlicht2025-08-29
3. Geändert2026-03-03
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-47700 is to upgrade Mattermost Server to version 10.5.10+incompatible or later. If upgrading immediately is not feasible, consider temporarily disabling the Agents Plugin to reduce the attack surface. Review the Agents Plugin configuration to ensure it is not configured to allow access to sensitive internal resources. Implement network segmentation to limit the potential impact of a successful SSRF attack. Monitor Mattermost Server logs for unusual outbound requests that could indicate exploitation attempts.