CVE-2026-5139

Mattermost plugin vulnerability CVE-2026-5139 affects Mattermost versions 11.7.x ≤ 11.7.0, 11.6.x ≤ 11.6.2, 11.5.x ≤ 11.5.5, 10.11.x ≤ 10.11.17. The issue arises in the /gitlab connect command handler where administrator authorization is not enforced for the setDefaultInstance call, allowing any ...

CVE-2026-5139 GitLab Plugin Allows Non-Admin Users to Modify Default Instance Configuration

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

CVE-2026-3117

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

EUVD-2026-30748

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117

Mattermost plugins contain a permission-check flaw in the GitLab plugin command processing. Versions affected: Mattermost Plugins

CVE-2026-3117

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117 Instance and webhook GitLab plugin commands were able to be run by non-admin users

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117 Instance and webhook GitLab plugin commands were able to be run by non-admin users

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117: Missing Authorization

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

PT-2026-41650

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...