CVE-2026-13411 — Vulnerability intelligence

mattermost — mattermost server

Published: 2026-10-22T11:17:52.843

CVSS

4.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709

Sources

• CVE-2026-13411
• Vendor Advisory