An issue exists in Mattermost Server prior to 5.13.0. Non-members may fetch a team's slash commands.
mattermost mattermost server