Skip to contentMattermost vulnerabilities
Newest
- mattermost, mattermost server +1 moreSanitize team member data returned by APICVE-2026-3636Fix available4.3 Medium
- mattermost, mattermost server +1 moreUnauthenticated WebSocket binary frame causes denial of service in Mattermost ServerCVE-2026-5740Fix available7.5 High
- mattermost, mattermost server +1 moreMissing request body size limits on Zoom plugin HTTP endpointsCVE-2026-5308Fix available4.9 Medium
- mattermost, mattermost server +1 moreDenial of service via crafted TIFF file uploadCVE-2026-5755Fix available6.5 Medium
- mattermost, mattermost mobile +1 moreMobile SSO authentication flow allows credential theft via malicious serverCVE-2026-228806.1 Medium
- mattermost, mattermost server +1 morePath traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.CVE-2026-4858Fix available8.0 High
- mattermost, mattermost server +1 moreInsufficient permission validation on cross-team playbook run creationCVE-2026-4055Fix available4.3 Medium
- mattermost, mattermost desktop +1 moreOpening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop AppCVE-2026-34716.5 Medium
- mattermost, mattermost desktop +1 moreCalling window.close() from server-side content causes crash in the Mattermost Desktop AppCVE-2026-46433.5 Low
- mattermost, mattermost server +1 moreSSRF via Host Header Spoofing in Custom Slash CommandsCVE-2026-6333Fix available3.5 Low
- mattermost, mattermost server +1 morePrevent password disclosure and force reset during Slack importCVE-2026-6345Fix available6.5 Medium
- mattermost, mattermost server +1 moreSensitive credentials exposed in plaintext in Mattermost support packetsCVE-2026-6346Fix available8.7 High
- mattermost, mattermost server +1 moreSlash command trigger-word update allowed command hijackingCVE-2026-28732Fix available4.3 Medium
- mattermost, mattermost server +1 moreMattermost Playbooks Plugin fails to enforce view permissions in list endpoints, allowing unauthorized access to public playbooksCVE-2026-6343Fix available4.3 Medium
- mattermost, mattermost server +1 moreMattermost Calls plugin exposes TURN server credentials in plaintext in support packetsCVE-2026-6347Fix available7.6 High
- mattermost, mattermost server +1 moreMissing authorization check in AI message rewrite endpoint allows access to private thread contentCVE-2026-5163Fix available6.5 Medium
- mattermost, mattermost server +1 moreInstance and webhook GitLab plugin commands were able to be run by non-admin usersCVE-2026-31176.5 Medium
- mattermost, mattermost server +1 morePlaybooks Plugin fails to validate team transfers, allowing unauthorized removal of member access via playbook updateCVE-2026-4286Fix available3.1 Low
- mattermost, mattermost server +1 moreMissing request origin validation on burn-on-read reveal endpointCVE-2026-6339Fix available4.3 Medium
- mattermost, mattermost server +1 moreMemory Exhaustion via Malicious 7zip File UploadCVE-2026-6340Fix available4.3 Medium
- mattermost, mattermost server +1 moreIncomplete group locking implementationCVE-2026-63414.3 Medium
- mattermost, mattermost server +1 moreGroup prefix matching bypass for subscriptionsCVE-2026-63424.3 Medium
- mattermost, mattermost server +1 moreUnescaped variables during error page compositionCVE-2026-3495Fix available3.8 Low
- mattermost, mattermost server +1 moreInsufficient token rotation validation in remote cluster invite confirmationCVE-2026-4273Fix available3.7 Low
- mattermost, mattermost server +1 moreMattermost fails to enforce create_post permission when editing postsCVE-2026-3637Fix available4.3 Medium
- mattermost, mattermost server +1 moreImproper Input Validation in MS Teams Meetings API HandlerCVE-2026-2325Fix available4.3 Medium
- mattermost, mattermost server +1 moreInsufficient authorization in shared channel membership sync allows remote cluster to remove users from arbitrary channelsCVE-2026-28759Fix available4.3 Medium
- mattermost, mattermost server +1 moreOAuth authorization code client binding not enforced during token redemption in MattermostCVE-2026-6334Fix available3.1 Low
- mattermost, mattermost server +1 morepost edit time limit is not enforced on some post update operationsCVE-2026-4053Fix available3.1 Low
- mattermost, mattermost server +1 moreSVG content served through Mattermost image proxy despite Content-Type restrictions causes client-side denial of serviceCVE-2026-4054Fix available4.3 Medium
- mattermost, mattermost server +1 moreRace Condition in Guest Magic Link Authentication Allows Token ReuseCVE-2026-3590Fix available6.5 Medium
- mattermost, mattermost server +1 moreCSRF Protection Bypass Allows Updating a User's Authentication MethodCVE-2026-28741Fix available6.8 Medium
- mattermost, mattermost server +1 moreConnected Workspaces: Malicious remote server can manipulate arbitrary user's statusCVE-2026-27769Fix available2.7 Low
- mattermostUnbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook EndpointCVE-2026-24661Fix available3.7 Low
- mattermost, mattermost server +1 moreUnbounded Request Body Read in MS Teams Plugin {{/lifecycle}} Webhook EndpointCVE-2026-21388Fix available3.7 Low
- mattermost legal hold, mattermost +1 moreAuthorization Bypass in Mattermost Legal Hold Plugin Due to Missing Return After Permission CheckCVE-2026-35248.3 High
- mattermost focalboardFocalboard IDOR in file content endpoint allows cross-user file access (unsupported product, no fix)CVE-2026-287364.3 Medium
- mattermost focalboardFocalboard Second-Order SQL Injection in category reorder endpoint allows data exfiltration (unsupported product, no fix)CVE-2026-257738.1 High
- mattermost, mattermost server +1 moreArbitrary File Read via Advanced Logging Support PacketCVE-2026-3112Fix available6.8 Medium
- mattermost, mattermost server +1 moreMissing timestamp validation in Zoom webhook handlerCVE-2026-31092.2 Low
- mattermost, mattermost server +1 moreGuest users can view group member IDs without respecting view restrictionsCVE-2026-3115Fix available4.3 Medium
- mattermost, mattermost server +1 moreZip Bomb Denial of Service via Unrestricted Archive DecompressionCVE-2026-3114Fix available6.5 Medium
- mattermost, mattermost server +1 moreImproper Input Validation in Zoom Plugin Webhook HandlerCVE-2026-31164.9 Medium
- mattermost, mattermost server +1 moremmctl export download command doesn’t restrict permissions to created file to file ownerCVE-2026-3113Fix available5.0 Medium
- mattermost, mattermost server +1 moreTerminal Escape Injection in mmctl Report Posts CommandCVE-2026-3108Fix available8.0 High
- mattermost, mattermost server +1 moreInsufficient authorization in shared channel membership sync grants team-level access instead of channel-level accessCVE-2026-4274Fix available5.4 Medium
- mattermost, mattermost server +1 moreCSRF vulnerability in UpdateAccessControlPolicyActiveStatus endpointCVE-2026-27659Fix available4.6 Medium
- mattermost, mattermost server +1 moreDoS via URL Previews Rendering Malicious SVGsCVE-2026-20719Fix available4.3 Medium
- mattermost, mattermost server +1 moreAccount Takeover via Substring Matching in OpenID Connect AuthenticationCVE-2026-27656Fix available5.7 Medium
- mattermost, mattermost server +1 moreDenial of Service via HTTP/2 single packet attack on login endpointCVE-2026-26233Fix available4.3 Medium
- Show moreLoading…