GHSA-p4vm-rgr6-x9pcMediumCVSS 6.5

Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before...

Published
October 26, 2026
Last Modified
October 26, 2026

🔗 CVE IDs covered (1)

📋 Description

Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723

🔗 References (3)