CVE-2026-26304
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs via the playbook run API. Mattermost Advisory ID: MMSA-2025-00542
Vendor
Product
CWE
Yayın Tarihi
2026-03-16 20:16:17
Güncelleme
2026-03-18 13:56:31
Source Identifier
responsibledisclosure@mattermost.com
KEV Date Added
-