VendorsMattermostmattermost_server11.10.0

Vulnerabilities

Mattermost Mattermost Server 11.10.0

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

11CVEs

Mattermost SAML RelayState forgery allows unauthorized team membership

Published 2026-10-16 · Analyzed

7.1EPSS 0.002

Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering

Published 2026-10-16 · Analyzed

6.5EPSS 0.003

Mattermost leaks interactive-message integration secrets to non-admin users via post-deletion events and thread reads

Published 2026-10-16 · Analyzed

6.5EPSS 0.003

Mattermost guest account privilege escalation via member roles API

Published 2026-10-16 · Analyzed

6.5EPSS 0.002

Missing server side validation allowed user to quarantine a DM and GM post

Published 2026-10-16 · Analyzed

6.4EPSS 0.002

Mattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel access

Published 2026-10-16 · Analyzed

5.0EPSS 0.002

Mattermost fails to reject OAuth application sessions in account type switch, allowing account takeover via bearer token

Published 2026-10-16 · Analyzed

4.9EPSS 0.002

Uncapped mention keys in user notification properties allow CPU exhaustion during post processing

Published 2026-10-16 · Analyzed

4.3EPSS 0.002

Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing users

Published 2026-10-16 · Analyzed

4.3EPSS 0.002

Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status

Published 2026-10-16 · Analyzed

4.3EPSS 0.002

Private team metadata disclosure via the team search API

Published 2026-10-16 · Analyzed

4.3EPSS 0.002