PT-2026-42747

Name of the Vulnerable Software and Affected Versions Mattermost version 11.6.0 Mattermost version 11.5.3 Mattermost version 11.4.4 Mattermost version 10.11.14 Description An issue exists where the system fails to archive the channel before removing persistent notifications. This allows an...

CVE-2025-2564

Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled...

Mattermost Command Execution Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a command execution vulnerability that stems from unrestricted command execution in an archive channel, which can be exploited by an attacker to run commands in an archive chann...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a command execution vulnerability that stems from unrestricted command execution in an archive channel, which can be exploited by an attacker to run commands in an archive chann...

Mattermost Unauthorized Access Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an unauthorized access vulnerability that stems from failing to properly authorize access to an archive channel when viewing the archive channel is disabled. An attacker could...

The vulnerability of the Mattermost instant messaging application, related to lack of access control, allows a malicious user to gain unauthorized access to archive channel files.

The vulnerability of the Mattermost instant messaging application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to files in the archive channels...

CVE-2023-43754

Mattermost fails to check whether the “Allow users to view archived channels” setting is enabled during permalink previews display, allowing members to view permalink previews of archived channels even if the “Allow users to view archived channels” setting is disabled...