Mattermost CVE-2026-2578

The risk assessment presents a nuanced picture: while the CVSS 3.1 score of 4.3 (Network/Low Complexity/Low Privileges/No User Interaction) might initially appear moderate, the attack vector and preconditions significantly constrain real-world exploitation. The vulnerability requires the attacker to already be an authenticated channel member (PR:L), meaning it cannot be exploited by anonymous or unauthenticated threat actors. The attack is not user-interaction dependent and is automatable (monitoring WebSocket events), which increases the practical attack probability. However, the technical impact is limited to confidentiality loss of messages that the attacker was already able to see once before deletion—this is not a privilege escalation or system compromise vector. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) correctly reflects that this is a low-impact information disclosure rather than a critical vulnerability. Without EPSS data or active KEV status provided, the real-world exploitation likelihood appears low, as this requires both knowledge of the specific vulnerability and opportunity to intercept WebSocket deletions during a narrow window. Organizations using burn-on-read for regulatory compliance (healthcare, finance) face higher risk than those using it purely for convenience.

An authenticated Mattermost channel member observes that a colleague posted a burn-on-read message containing sensitive information (e.g., API credentials, personal data, or confidential project details). The colleague realizes the mistake and deletes the message before the burn-on-read timer expires, expecting it to be completely erased. However, the attacker has set up a WebSocket listener monitoring deletion events and receives the unredacted message content in the post deletion event payload, allowing them to recover the sensitive information that was never meant to persist. The attack requires only standard channel access and network connectivity to the Mattermost server, making it feasible for any insider with legitimate authentication credentials.