CVE-2026-6345

Mattermost advisory CVE-2026-6345 affects Mattermost versions 11.4.x ≤ 11.4.3, 11.5.x ≤ 11.5.1 and 10.11.x ≤ 10.11.13. The issue is described as failing to prevent disclosure of created user passwords during the Slack import process, which could allow a malicious actor to impersonate a user using...

PT-2026-41659

Name of the Vulnerable Software and Affected Versions Mattermost version 11.5.1 Mattermost version 10.11.13 Mattermost version 11.4.3 Description An issue exists where the software fails to prevent the disclosure of created user passwords. This allows a malicious attacker to impersonate users by...

CVE-2026-6345: Insufficiently Protected Credentials

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a user via the use of some of those passwords.. Mattermost Advisory ID: MMSA-2026-00614...