Description
Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | <=11.9 11.1.9 11.5.8 11.10.7.0 – ≤ <=11.9 11.1.9 11.5.8 11.10.7.0 | 11.10.0 |
Advisories 1
- WID-SEC-2026-4179 Mattermost Server: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 26, 2026
References
- MMSA-2026-00723 vendor-advisory