Password hash and MFA secret returned in user email verification endpoint

Nil pointer dereference in bulk import crashes server

Path Traversal in Template Upload Allows Uploading Files Outside Target Directory

Import Path Traversal Enables Unauthorized Unsigned Plugin Installation

Arbitrary file read by system admin via path traversal

Syatem admin profile modification by delegated granular administration role

Zipbomb DoS via Missing Slack Import Validation

Mattermost versions 9.5.x <= 9.5.7 and 9.10.x <= 9.10.0 fail to time limit and size limit the CA path file in the ElasticSearch configuration which allows a System Role with…

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body

One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct…

Unescaped variables during error page composition

Bypass of "Max failed attempts" restriction via race condition

MFA Code Replay

Mattermost Desktop local network access from server-rendered content

CSRF vulnerability in UpdateAccessControlPolicyActiveStatus endpoint

Mattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites.

Client-Side Path Traversal Leading to CSRF in Playbooks

Null condition in Playbooks import crashes the plugin

Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing users

Private team metadata disclosure via the team search API

Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status

Private channel ID disclosure via user status endpoints

Uncapped mention keys in user notification properties allow CPU exhaustion during post processing

Unbounded post ID array in the bulk reactions endpoint allows denial of service

MS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin process

Mattermost Server Algorithmic DoS via Unbounded Markdown Block Nesting

Boards plugin denial of service via unvalidated block fields.properties

Playbooks channel action update validation issue

Inconsistent authorization checks in Mattermost Boards endpoints

Mattermost Markdown autolink parsing denial of service

Fix authenticated members disabling file content indexing server-wide via extraction pool exhaustion

Board archive import bypasses team board creation permissions

Delegated OAuth tokens could revoke unrelated OAuth application authorizations

_GitLab Plugin allows cross-channel post injection and phishing via missing channel permission checks in issue API endpoints_

Board channel linking without read channel permission validation

Missing run-state validation on finished playbook runs

Denial of service via unbounded document content extraction in Mattermost Server

Unscoped updates to other playbooks' metric configuration

Remote cluster metadata enumeration via /share-channel autocomplete

Authenticated remote cluster can modify or delete posts it does not own in Mattermost Connected Workspaces shared channels

Global session revocation does not invalidate active WebSocket connections

*Missing* {{invite_user}} *permission check on team creation allows unprivileged users to set open-invite and allowed-domains team settings*

Mattermost fails to scope role_updated websocket events to authorized team and channel members

Insufficient input validation in GitHub plugin API causes denial of service

Sanitize team member data returned by API

Insufficient permission validation on cross-team playbook run creation

Slash command trigger-word update allowed command hijacking

Mattermost Playbooks Plugin fails to enforce view permissions in list endpoints, allowing unauthorized access to public playbooks

Playbooks Plugin fails to validate team transfers, allowing unauthorized removal of member access via playbook update

Missing request origin validation on burn-on-read reveal endpoint