LH
Product
Legal Hold
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Legal Hold to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3524 | 8.8 | Apr 6 | Authorization Bypass in Mattermost Legal Hold Plugin Due to Missing Return After Permission Check Affected: before 1.1.5 |
| CVE-2026-6957 | 4.9 | May 27 | Path traversal in Mattermost Legal Hold plugin via unsanitized file name from federated peer allows arbitrary file write. Affected: through 1.1.5 |
Showing 2