Skip to content
OpenAdvisories

Product · Mattermost

Mattermost Google Drive Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-2299

    Improper Access Control in Mattermost Google Drive Plugin File Creation Endpoint

    The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Google Drive files to unauthorized private channels and disclose …

    Mattermost Mattermost Google Drive Plugin