# Mattermost. Every CVE that names Mattermost among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Mattermost Server Denial of Service via Animated GIF Emoji Upload](https://agentprime.io/advisories/CVE-2026-10819.md) `CVE-2026-10819` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-409 - [Denial of service via unbounded document content extraction in Mattermost Server](https://agentprime.io/advisories/CVE-2026-10600.md) `CVE-2026-10600` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Denial of service - [Posting a malicious markdown image crashes the Mattermost Desktop App](https://agentprime.io/advisories/CVE-2026-8075.md) `CVE-2026-8075` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-754 - [Mattermost Desktop App crashes when malformed arguments are provided to some exposed IPC methods](https://agentprime.io/advisories/CVE-2026-9602.md) `CVE-2026-9602` · CVE record: Mattermost Mattermost · CVSS 5.7 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Denial of service - [Unscoped updates to other playbooks' metric configuration](https://agentprime.io/advisories/CVE-2026-6541.md) `CVE-2026-6541` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control - [Mattermost schemes teams endpoint exposes private team invite IDs](https://agentprime.io/advisories/CVE-2026-9820.md) `CVE-2026-9820` · CVE record: Mattermost Mattermost · CVSS 3.8 Low · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control - [Remote cluster metadata enumeration via /share-channel autocomplete](https://agentprime.io/advisories/CVE-2026-9824.md) `CVE-2026-9824` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control - [Deactivated guest accounts can authenticate via magic-link token in Mattermost REST API login endpoint](https://agentprime.io/advisories/CVE-2026-9597.md) `CVE-2026-9597` · CVE record: Mattermost Mattermost · CVSS 5.4 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-305 - [Crafted message attachment causes client-side denial of service via markdown parser regex backtracking in Mattermost](https://agentprime.io/advisories/CVE-2026-6850.md) `CVE-2026-6850` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Denial of service - [Unauthorized users can trigger interactive post actions in private channels via action cookie channel mismatch in Mattermost](https://agentprime.io/advisories/CVE-2026-10106.md) `CVE-2026-10106` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control - [Ordinary group/direct message member can enable group_constrained and remove all channel participants](https://agentprime.io/advisories/CVE-2026-10085.md) `CVE-2026-10085` · CVE record: Mattermost Mattermost · CVSS 5.4 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control - [Incoming webhook user attribution via unvalidated webhook owner](https://agentprime.io/advisories/CVE-2026-9708.md) `CVE-2026-9708` · CVE record: Mattermost Mattermost · CVSS 4.9 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control - [Authenticated remote cluster can modify or delete posts it does not own in Mattermost Connected Workspaces shared channels](https://agentprime.io/advisories/CVE-2026-10103.md) `CVE-2026-10103` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control - [Deactivated user accounts can continue to obtain valid OAuth access tokens via refresh token grant in Mattermost](https://agentprime.io/advisories/CVE-2026-9571.md) `CVE-2026-9571` · CVE record: Mattermost Mattermost · CVSS 5.9 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-305 - [SSRF via unvalidated attachment URLs in Mattermost Agents plugin MCP server](https://agentprime.io/advisories/CVE-2026-4339.md) `CVE-2026-4339` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF) - [Mattermost Agents plugin logs unsanitized OpenAI API keys on authentication errors](https://agentprime.io/advisories/CVE-2026-9699.md) `CVE-2026-9699` · CVE record: Mattermost Mattermost · CVSS 6.8 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Information disclosure - [Markdown image rendering bypass in AI bot tool result posts in Mattermost](https://agentprime.io/advisories/CVE-2026-3472.md) `CVE-2026-3472` · CVE record: Mattermost Mattermost · CVSS 3.5 Low · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-693 - [Overly long URLs crash the Mattermost Desktop App](https://agentprime.io/advisories/CVE-2026-8683.md) `CVE-2026-8683` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service - [Mattermost Desktop App fails to restrict the allow list of domains which NTLM credentials are passed](https://agentprime.io/advisories/CVE-2026-6517.md) `CVE-2026-6517` · CVE record: Mattermost Mattermost · CVSS 6.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Hard-coded credentials - [Path traversal in Mattermost Legal Hold plugin via unsanitized file name from federated peer allows arbitrary file write.](https://agentprime.io/advisories/CVE-2026-6957.md) `CVE-2026-6957` · CVE record: Mattermost Mattermost · CVSS 8.0 High · Not analysed yet · Published 27 May 2026 · Tags: Path traversal - [Mobile SSO authentication flow allows credential theft via malicious server](https://agentprime.io/advisories/CVE-2026-22880.md) `CVE-2026-22880` · CVE record: Mattermost Mattermost · CVSS 6.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF) - [Opening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop App](https://agentprime.io/advisories/CVE-2026-3471.md) `CVE-2026-3471` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 18 May 2026 · Tags: CWE-939 - [Calling window.close() from server-side content causes crash in the Mattermost Desktop App](https://agentprime.io/advisories/CVE-2026-4643.md) `CVE-2026-4643` · CVE record: Mattermost Mattermost · CVSS 3.5 Low · Not analysed yet · Published 18 May 2026 · Tags: CWE-754 - [Instance and webhook GitLab plugin commands were able to be run by non-admin users](https://agentprime.io/advisories/CVE-2026-3117.md) `CVE-2026-3117` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 18 May 2026 · Tags: Broken access control - [Incomplete group locking implementation](https://agentprime.io/advisories/CVE-2026-6341.md) `CVE-2026-6341` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 18 May 2026 · Tags: Broken access control - [Group prefix matching bypass for subscriptions](https://agentprime.io/advisories/CVE-2026-6342.md) `CVE-2026-6342` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 18 May 2026 · Tags: Broken access control - [Authorization Bypass in Mattermost Legal Hold Plugin Due to Missing Return After Permission Check](https://agentprime.io/advisories/CVE-2026-3524.md) `CVE-2026-3524` · CVE record: Mattermost Mattermost · CVSS 8.3 High · Not analysed yet · Published 6 Apr 2026 · Tags: Broken access control - [Missing timestamp validation in Zoom webhook handler](https://agentprime.io/advisories/CVE-2026-3109.md) `CVE-2026-3109` · CVE record: Mattermost Mattermost · CVSS 2.2 Low · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-754 - [Improper Input Validation in Zoom Plugin Webhook Handler](https://agentprime.io/advisories/CVE-2026-3116.md) `CVE-2026-3116` · CVE record: Mattermost Mattermost · CVSS 4.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Denial of service - [Permalink Preview Information Disclosure After Permission Revocation](https://agentprime.io/advisories/CVE-2026-1629.md) `CVE-2026-1629` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-672 - [Team Admin Privilege Escalation to Demote Members to Guest](https://agentprime.io/advisories/CVE-2026-26230.md) `CVE-2026-26230` · CVE record: Mattermost Mattermost · CVSS 3.8 Low · Not analysed yet · Published 16 Mar 2026 · Tags: Broken access control - [DoS in Calls plugin via malformed msgpack in websocket request.](https://agentprime.io/advisories/CVE-2026-2454.md) `CVE-2026-2454` · CVE record: Mattermost Mattermost · CVSS 5.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-1287 - [Admin RCE via Malicious Plugin Upload on CI Test Instances](https://agentprime.io/advisories/CVE-2026-2462.md) `CVE-2026-2462` · CVE record: Mattermost Mattermost · CVSS 6.6 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Broken access control - [Mattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites.](https://agentprime.io/advisories/CVE-2026-1628.md) `CVE-2026-1628` · CVE record: Mattermost Mattermost · CVSS 4.6 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-829 - [Arbitrary application execution via unvalidated server-controlled URLs in Help menu](https://agentprime.io/advisories/CVE-2026-1046.md) `CVE-2026-1046` · CVE record: Mattermost Mattermost · CVSS 7.6 High · Not analysed yet · Published 16 Feb 2026 · Tags: CWE-939 - [Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store](https://agentprime.io/advisories/CVE-2025-13326.md) `CVE-2025-13326` · CVE record: Mattermost Mattermost · CVSS 3.9 Low · Not analysed yet · Published 17 Dec 2025 · Tags: CWE-693 - [Inadequate validation of SSO redirect credentials permits credential theft](https://agentprime.io/advisories/CVE-2025-59480.md) `CVE-2025-59480` · CVE record: Mattermost Mattermost · CVSS 6.1 Medium · Not analysed yet · Published 13 Nov 2025 · Tags: Cross-site request forgery (CSRF) - [Mattermost Desktop DoS when user has basic authentication server configured](https://agentprime.io/advisories/CVE-2025-55035.md) `CVE-2025-55035` · CVE record: Mattermost Mattermost · CVSS 6.1 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-754 - [Mattermost Desktop App crashes when clicking on malformed external URL](https://agentprime.io/advisories/CVE-2025-58084.md) `CVE-2025-58084` · CVE record: Mattermost Mattermost · CVSS 3.5 Low · Not analysed yet · Published 13 Oct 2025 · Tags: CWE-1287 - [Unauthorized Notification Exposure in Mobile App Under Specific Conditions](https://agentprime.io/advisories/CVE-2025-30516.md) `CVE-2025-30516` · CVE record: Mattermost Mattermost · CVSS 2.0 Low · Not analysed yet · Published 14 Apr 2025 · Tags: Authentication bypass - [Denial of Service Via Malicious GIF](https://agentprime.io/advisories/CVE-2025-1558.md) `CVE-2025-1558` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 24 Mar 2025 · Tags: CWE-1287 - [SQL Injection in Mattermost Boards via board category ID reordering](https://agentprime.io/advisories/CVE-2025-24490.md) `CVE-2025-24490` · CVE record: Mattermost Mattermost · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2025 · Tags: SQL injection - [Leaked User IDs and Metadata of Deleted DMs](https://agentprime.io/advisories/CVE-2025-0503.md) `CVE-2025-0503` · CVE record: Mattermost Mattermost · CVSS 3.1 Low · Not analysed yet · Published 14 Feb 2025 · Tags: CWE-754 - [Mobile crash via object that can't be cast to String in Attachment Field](https://agentprime.io/advisories/CVE-2025-20630.md) `CVE-2025-20630` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 16 Jan 2025 · Tags: CWE-1287 - [Mobile crash via improper validation of proto style in attachments](https://agentprime.io/advisories/CVE-2025-20072.md) `CVE-2025-20072` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 16 Jan 2025 · Tags: CWE-704 - [Mobile crash via file with specially crafted filename](https://agentprime.io/advisories/CVE-2025-0476.md) `CVE-2025-0476` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287 - [Insufficient Input Validation on Post Props](https://agentprime.io/advisories/CVE-2025-21083.md) `CVE-2025-21083` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287 - [Insufficient Input Validation on Post Props](https://agentprime.io/advisories/CVE-2025-20036.md) `CVE-2025-20036` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1287 - [Insecure Android File Provider Paths](https://agentprime.io/advisories/CVE-2024-11358.md) `CVE-2024-11358` · CVE record: Mattermost Mattermost · CVSS 5.7 Medium · Not analysed yet · Published 16 Dec 2024 · Tags: Broken access control - [Improper propagation of permission scheme updates across cluster nodes](https://agentprime.io/advisories/CVE-2024-12247.md) `CVE-2024-12247` · CVE record: Mattermost Mattermost · CVSS 4.6 Medium · Not analysed yet · Published 5 Dec 2024 · Tags: Broken access control - [Domain Restriction Bypass on Registration](https://agentprime.io/advisories/CVE-2024-11599.md) `CVE-2024-11599` · CVE record: Mattermost Mattermost · CVSS 8.2 High · Not analysed yet · Published 28 Nov 2024 · Tags: CWE-754 - [Private channel names leaking when Elasticsearch is enabled](https://agentprime.io/advisories/CVE-2024-52032.md) `CVE-2024-52032` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 9 Nov 2024 · Tags: Information disclosure - [MFA Code Replay](https://agentprime.io/advisories/CVE-2024-36250.md) `CVE-2024-36250` · CVE record: Mattermost Mattermost · CVSS 3.1 Low · Not analysed yet · Published 9 Nov 2024 · Tags: Authentication bypass - [Unauthorized Access to view channels' details](https://agentprime.io/advisories/CVE-2024-42000.md) `CVE-2024-42000` · CVE record: Mattermost Mattermost · CVSS 2.7 Low · Not analysed yet · Published 9 Nov 2024 · Tags: Broken access control - [Insufficient Authorization On Unlinked Channel Files](https://agentprime.io/advisories/CVE-2024-9155.md) `CVE-2024-9155` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2024 · Tags: Broken access control - [Unauthorized access on archived channels](https://agentprime.io/advisories/CVE-2024-42406.md) `CVE-2024-42406` · CVE record: Mattermost Mattermost · CVSS 5.4 Medium · Not analysed yet · Published 26 Sept 2024 · Tags: Broken access control - [Weak SSRF Filtering](https://agentprime.io/advisories/CVE-2024-45843.md) `CVE-2024-45843` · CVE record: Mattermost Mattermost · CVSS 3.1 Low · Not analysed yet · Published 26 Sept 2024 · Tags: Server-side request forgery (SSRF) - [Unauthorized access on archived channels via file links](https://agentprime.io/advisories/CVE-2024-47145.md) `CVE-2024-47145` · CVE record: Mattermost Mattermost · CVSS 3.1 Low · Not analysed yet · Published 26 Sept 2024 · Tags: Broken access control - [Mobile password gets saved in dictionary under conditions](https://agentprime.io/advisories/CVE-2024-45833.md) `CVE-2024-45833` · CVE record: Mattermost Mattermost · CVSS 4.5 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-693 - [User creation date manipulation in POST /api/v4/users](https://agentprime.io/advisories/CVE-2024-42411.md) `CVE-2024-42411` · CVE record: Mattermost Mattermost · CVSS 5.3 Medium · Not analysed yet · Published 22 Aug 2024 · Tags: CWE-754 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .