Mattermost Desktop App Hardened Runtime Vulnerability Allowing TCC Permission Inheritance

A vulnerability exists in the Mattermost Desktop App for Mac App Store versions prior to 6.0.0. The issue arises because these versions do not activate the Hardened Runtime, which can lead to an attacker inheriting TCC permissions by transferring the application binary to a temporary folder.

Impact

Exploitation of this vulnerability could allow an attacker to inherit TCC permissions, potentially leading to unauthorized access or manipulation of user data or application behavior.

Remediation

Users can upgrade to Mattermost Desktop App version 6.0.0 or later to address this vulnerability.