CVE-2026-14344

Mattermost Boards endpoints in versions 11.9.x ≤ 11.9.0, 11.8.x ≤ 11.8.4, 11.7.x ≤ 11.7.7, and 10.11.x ≤ 10.11.22 fail to enforce the board-creation permission. An authenticated user without proper authorization can create boards via the board duplicate , boards-and-blocks , and archive-import en...