CVE-2026-2461

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2461", "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "state": "PUBLISHED", "assignerShortName": "Mattermost", "dateReserved": "2026-02-13T11:09:37.505Z", "datePublished": "2026-03-16T11:16:32.720Z", "dateUpdated": "2026-03-16T13:49:57.924Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Mattermost", "vendor": "Mattermost", "versions": [{"lessThanOrEqual": "11.0.3", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "11.2.2", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "10.10.11", "status": "affected", "version": "0", "versionType": "semver"}, {"version": "11.4.0", "status": "unaffected"}, {"version": "11.3.1", "status": "unaffected"}, {"version": "11.2.3", "status": "unaffected"}, {"version": "10.11.11", "status": "unaffected"}]}], "credits": [{"lang": "en", "type": "finder", "value": "daynight"}], "descriptions": [{"lang": "en", "value": "Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisory ID: MMSA-2025-00559"}], "metrics": [{"cvssV3_1": {"attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseSeverity": "MEDIUM", "baseScore": 4.3}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "cweId": "CWE-639"}]}], "references": [{"url": "https://mattermost.com/security-updates", "name": "MMSA-2025-00559", "tags": ["vendor-advisory"]}], "solutions": [{"value": "Update Mattermost Plugins to versions 11.4.0, 11.3.1, 11.2.3, 10.11.11 or higher.", "lang": "en"}], "source": {"advisory": "MMSA-2025-00559", "defect": ["https://mattermost.atlassian.net/browse/MM-66751"], "discovery": "EXTERNAL"}, "title": "Missing authorization check allows unauthorized modification of other users' comments on a board", "providerMetadata": {"orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "shortName": "Mattermost", "dateUpdated": "2026-03-16T11:16:32.720Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2461", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-16T13:42:41.162405Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-16T13:49:57.924Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2461", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-16T13:42:41.162405Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-16T13:44:17.926Z"}}], "cna": {"title": "Missing authorization check allows unauthorized modification of other users' comments on a board", "source": {"defect": ["https://mattermost.atlassian.net/browse/MM-66751"], "advisory": "MMSA-2025-00559", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "daynight"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Mattermost", "product": "Mattermost", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "11.0.3"}, {"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "11.2.2"}, {"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "10.10.11"}, {"status": "unaffected", "version": "11.4.0"}, {"status": "unaffected", "version": "11.3.1"}, {"status": "unaffected", "version": "11.2.3"}, {"status": "unaffected", "version": "10.11.11"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update Mattermost Plugins to versions 11.4.0, 11.3.1, 11.2.3, 10.11.11 or higher."}], "references": [{"url": "https://mattermost.com/security-updates", "name": "MMSA-2025-00559", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisory ID: MMSA-2025-00559"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639: Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "shortName": "Mattermost", "dateUpdated": "2026-03-16T11:16:32.720Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2461", "state": "PUBLISHED", "dateUpdated": "2026-03-16T13:49:57.924Z", "dateReserved": "2026-02-13T11:09:37.505Z", "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "datePublished": "2026-03-16T11:16:32.720Z", "assignerShortName": "Mattermost"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Mattermost", "vendor": "Mattermost", "versions": [{"lessThanOrEqual": "11.0.3", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "11.2.2", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "10.10.11", "status": "affected", "version": "0", "versionType": "semver"}, {"status": "unaffected", "version": "11.4.0"}, {"status": "unaffected", "version": "11.3.1"}, {"status": "unaffected", "version": "11.2.3"}, {"status": "unaffected", "version": "10.11.11"}]}], "source": "responsibledisclosure@mattermost.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCB7AD99-5C39-426F-842F-71A2EA2A15BF", "versionEndExcluding": "10.11.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "D19D4EFF-0820-4296-A13B-4706A6C0F643", "versionEndIncluding": "11.0.3", "versionStartIncluding": "11.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "3889F6BD-40C6-4AE8-802B-73ACFD119A04", "versionEndExcluding": "11.2.3", "versionStartIncluding": "11.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "945A6E29-209F-4992-8692-BEF63DCB6B98", "versionEndExcluding": "11.3.1", "versionStartIncluding": "11.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisory ID: MMSA-2025-00559"}, {"lang": "es", "value": "Las versiones de los plugins de Mattermost &lt;=11.3 11.0.3 11.2.2 10.10.11.0 no implementan comprobaciones de autorizaci\u00f3n en las modificaciones de bloques de comentarios, lo que permite a un atacante autorizado con permiso de editor modificar comentarios creados por otros miembros del tablero. ID de aviso de Mattermost: MMSA-2025-00559"}], "id": "CVE-2026-2461", "lastModified": "2026-06-17T10:31:05.690", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "responsibledisclosure@mattermost.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2461", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-16T13:42:41.162405Z", "version": "2.0.3"}}]}, "published": "2026-03-16T14:19:29.753", "references": [{"source": "responsibledisclosure@mattermost.com", "tags": ["Vendor Advisory"], "url": "https://mattermost.com/security-updates"}], "sourceIdentifier": "responsibledisclosure@mattermost.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "responsibledisclosure@mattermost.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,11.0.3]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,11.2.2]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,10.10.11]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "11.4.0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "11.3.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "11.2.3"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "10.11.11"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Mattermost", "source": "cna", "vendor": "Mattermost"}, "product": "mattermost_server", "vendor": "mattermost"}], "analysis": {"en": {"generated_at": "2026-03-20T19:52:33.824037+00:00", "value": {"mitigation_remediation": ["Upgrade Mattermost Plugins to version 11.4.0 or newer as specified in the advisory.", "Verify the installed plugin version matches the patched release."], "summary": {"action": "Apply Patch", "impact": "Unauthorized comment modification"}, "threat_synthesis": {"affected_systems": "Mattermost Plugins up to and including versions 11.3, 11.0.3, 11.2.2 and 10.10.11.0 are affected. Any server that runs these plugin releases, or earlier unpatched builds, may be vulnerable. The issue resides solely in the Mattermost server plugin component.", "description_and_impact": "A missing authorization check in Mattermost Plugins allows an account with editor permission to alter comments created by other board members. The flaw permits the modification of comment content, resulting in a breach of data integrity for all users who view those comments.", "risk_and_exploitability": "The CVSS score of 4.3 indicates low\u2011to\u2011moderate severity, and the EPSS score below 1% suggests a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires that the attacker already possesses editor privileges, after which they can modify others\u2019 comments but gain no additional privileges or remote code execution. Therefore the risk to confidentiality and availability is negligible, with the primary concern being integrity of comment data."}}}}, "created": "2026-03-24T10:44:57.771523+00:00", "updated": "2026-03-30T07:02:46.371978+00:00", "vendors": ["mattermost", "mattermost$PRODUCT$mattermost_server"]}