CVE-2026-4286

Mattermost Playbooks plugin vulnerability CVE-2026-4286 affects Mattermost versions 11.5.x <= 11.5.1 and 10.11.x

PT-2023-21043 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: A missing permissions check in Mattermost Playbooks allows an attacker to modify a playbook via the "/plugins/playbooks/api/v0/playbooks/playbookID" API endpoint, using the playbookID...