Vulnerabilities

CVSS

3.5 Low

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Risk score

28.0

Published

2026-06-26

Status

Analyzed

Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to properly apply markdown image rendering restrictions to AI bot tool result posts, which allows an authenticated attacker to exfiltrate data to an attacker-controlled server via injecting markdown image syntax into tool result content rendered by a victim's client.. Mattermost Advisory ID: MMSA-2026-00619

Weaknesses

CWE-693

Coverage 1

vulnerability

Multiples vulnérabilités dans les produits Mattermost (29 mai 2026)

Multiple vulnerabilities have been discovered in Mattermost Server, allowing attackers to compromise data confidentiality and bypass security policies. These vulnerabilities, detailed in Mattermost security bulletins, re…

CERT-FR · May 29, 2026 Medium

CVE-2026-3472CVE-2026-4339vulnerabilitymattermostsecurity

All articles mentioning it

Advisories and references

• mattermost.com/security-updates