Skip to contentMattermost vulnerabilities
Newest
- mattermost, mattermost server +1 moreBoards plugin retains Board Admin rights for users demoted to System GuestCVE-2026-105276.3 Medium
- mattermost, mattermost server +1 moreMissing per-channel team-scope check in ABAC access control policy unassign allows cross-team policy removalCVE-2026-157544.2 Medium
- mattermost, mattermost server +1 moreInsufficient validation of guest board admin privileges on archive importCVE-2026-160443.9 Low
- mattermost, mattermost server +1 moreDelegated OAuth tokens could revoke unrelated OAuth application authorizationsCVE-2026-160452.7 Low
- mattermost_GitLab Plugin allows cross-channel post injection and phishing via missing channel permission checks in issue API endpoints_CVE-2026-160493.9 Low
- mattermost, mattermost server +1 moreBoard channel linking without read channel permission validationCVE-2026-160474.3 Medium
- mattermost, mattermost server +1 moreMissing run-state validation on finished playbook runsCVE-2026-160463.5 Low
- mattermost, mattermost server +1 moreChannel member roles accept out-of-scope rolesCVE-2026-160486.3 Medium
- mattermost, mattermost server +1 moreBoards archive import endpoint allows resource exhaustion via zip bomb and file size limit bypass in MattermostCVE-2026-142986.5 Medium
- mattermost, mattermost server +1 moreSAML certificate deletion allows path traversal to delete arbitrary files outside the config directoryCVE-2026-75215.5 Medium
- mattermost, mattermost server +1 moreMattermost Server Denial of Service via Animated GIF Emoji UploadCVE-2026-108196.5 Medium
- mattermost, mattermost server +1 moreDenial of service via unbounded document content extraction in Mattermost ServerCVE-2026-106004.3 Medium
- mattermost, mattermost desktop +1 morePosting a malicious markdown image crashes the Mattermost Desktop AppCVE-2026-80756.5 Medium
- mattermost, mattermost desktop +1 moreMattermost Desktop App crashes when malformed arguments are provided to some exposed IPC methodsCVE-2026-96025.7 Medium
- mattermost, mattermost server +1 moreUnscoped updates to other playbooks' metric configurationCVE-2026-65414.3 Medium
- mattermost, mattermost server +1 moreMattermost schemes teams endpoint exposes private team invite IDsCVE-2026-98203.8 Low
- mattermost, mattermost server +1 moreRemote cluster metadata enumeration via /share-channel autocompleteCVE-2026-98244.3 Medium
- mattermost, mattermost server +1 moreDeactivated guest accounts can authenticate via magic-link token in Mattermost REST API login endpointCVE-2026-95975.4 Medium
- mattermost, mattermost server +1 moreCrafted message attachment causes client-side denial of service via markdown parser regex backtracking in MattermostCVE-2026-68506.5 Medium
- mattermost, mattermost server +1 moreUnauthorized users can trigger interactive post actions in private channels via action cookie channel mismatch in MattermostCVE-2026-101066.5 Medium
- mattermost, mattermost server +1 moreOrdinary group/direct message member can enable group_constrained and remove all channel participantsCVE-2026-100855.4 Medium
- mattermost, mattermost server +1 moreIncoming webhook user attribution via unvalidated webhook ownerCVE-2026-97084.9 Medium
- mattermost, mattermost server +1 moreAuthenticated remote cluster can modify or delete posts it does not own in Mattermost Connected Workspaces shared channelsCVE-2026-101034.3 Medium
- mattermost, mattermost server +1 moreDeactivated user accounts can continue to obtain valid OAuth access tokens via refresh token grant in MattermostCVE-2026-95715.9 Medium
- mattermost, mattermost server +1 moreSSRF via unvalidated attachment URLs in Mattermost Agents plugin MCP serverCVE-2026-43396.5 Medium
- mattermostMattermost Agents plugin logs unsanitized OpenAI API keys on authentication errorsCVE-2026-96996.8 Medium
- mattermost, mattermost server +1 moreMarkdown image rendering bypass in AI bot tool result posts in MattermostCVE-2026-34723.5 Low
- mattermost github.com/mattermost/mattermost/server/publicClient4 fails to validate path parametersCVE-2026-13426Fix available5.4 Medium
- mattermost google drive, google drive plugin +1 moreImproper Access Control in Mattermost Google Drive Plugin File Creation EndpointCVE-2026-22994.2 Medium
- mattermost, mattermost server +1 moreUser Manager can demote bot accounts to guest without bot-management permissionCVE-2026-8823Fix available3.8 Low
- mattermost, mattermost server +1 moreIDOR in Jira plugin subscription edit endpointCVE-2026-6062Fix available6.4 Medium
- mattermost, mattermost server +1 moreMattermost Jira plugin had unauthenticated {{/ac/installed}} lifecycle callback during pending Jira Cloud installCVE-2026-6673Fix available6.4 Medium
- mattermost, mattermost server +1 moreImproper Permission Check Allows User Manager to Deactivate Bot AccountsCVE-2026-8074Fix available3.8 Low
- mattermost, mattermost server +1 moreGlobal session revocation does not invalidate active WebSocket connectionsCVE-2026-9162Fix available4.3 Medium
- mattermost, mattermost server +1 moreGitLab Plugin Allows Non-Admin Users to Modify Default Instance ConfigurationCVE-2026-5139Fix available5.4 Medium
- mattermost, mattermost desktop +1 moreOverly long URLs crash the Mattermost Desktop AppCVE-2026-86836.5 Medium
- mattermost, mattermost desktop +1 moreMattermost Desktop App fails to restrict the allow list of domains which NTLM credentials are passedCVE-2026-65176.3 Medium
- mattermost, mattermost server +1 moreCVE-2026-6961: Path traversal via unsanitized FileInfo.Name in Mattermost federation syncCVE-2026-6961Fix available7.6 High
- mattermost, mattermost server +1 moreMattermost group syncable endpoints allow privilege escalation via scheme_adminCVE-2026-7387Fix available8.8 High
- mattermost, mattermost server +1 morePlugin bot username conflict allows user account to be used as bot identity in Mattermost ServerCVE-2026-6046Fix available5.3 Medium
- mattermost, mattermost server +1 more*Missing* {{invite_user}} *permission check on team creation allows unprivileged users to set open-invite and allowed-domains team settings*CVE-2026-6689Fix available4.3 Medium
- mattermost, mattermost server +1 moreMattermost Remote Cluster PATCH API Leaks Authentication TokensCVE-2026-7184Fix available6.5 Medium
- mattermost, mattermost server +1 moreMattermost: Delegated admins could patch protected default system rolesCVE-2026-6739Fix available6.7 Medium
- mattermost, mattermost server +1 moreMattermost fails to scope role_updated websocket events to authorized team and channel membersCVE-2026-3433Fix available4.3 Medium
- mattermost legal hold, mattermost +1 morePath traversal in Mattermost Legal Hold plugin via unsanitized file name from federated peer allows arbitrary file write.CVE-2026-69578.0 High
- mattermost, mattermost server +1 moreServer panic via outgoing webhook responsesCVE-2026-4915Fix available6.5 Medium
- mattermost, mattermost server +1 moreGitHub OAuth Scope ValidationCVE-2026-28735Fix available5.4 Medium
- mattermost, mattermost server +1 morePersistent notification timing attack causing server denial of serviceCVE-2026-4635Fix available6.5 Medium
- mattermost, mattermost server +1 moreImproper file ownership validation in the Boards API allows unauthorised file accessCVE-2026-3473Fix available5.9 Medium
- mattermost, mattermost server +1 moreInsufficient input validation in GitHub plugin API causes denial of serviceCVE-2026-4646Fix available4.3 Medium
- Show moreLoading…