EUVD-2026-31242
GHSA-c4r7-j7pp-r8mp
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL.. Mattermost Advisory ID: MMSA-2026-00640
AnalysisAI
Privilege escalation via path traversal in Mattermost collaboration platform allows authenticated users to invoke arbitrary internal APIs using the system administrator's auth token by manipulating integration action URLs. Affected branches include 11.6.x, 11.5.x, 11.4.x, and 10.11.x, with no public exploit identified at time of analysis. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
24 hours: Inventory Mattermost instances for affected versions (11.6.x, 11.5.x, 11.4.x, 10.11.x) and document authenticated user base with integration access. 7 days: Restrict integration creation and modification privileges to trusted administrator accounts; implement monitoring and alerts for admin API invocations; subscribe to Mattermost security advisories for patch notification. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today