An issue exists in Mattermost Desktop App prior to 3.4.0. Strings could be executed as code via injection.
mattermost mattermost desktop