{"id":"EUVD-2026-30751","enisaUuid":"377ff6e8-412d-30d8-88d4-e708368fe426","description":"Mattermost versions 11.5.x \u003c\u003d 11.5.1, 10.11.x \u003c\u003d 10.11.13, 11.4.x \u003c\u003d 11.4.3 fail to check public/private permissions which allows members without these permissions to access public playbooks via /get.. Mattermost Advisory ID: MMSA-2026-00591","datePublished":"May 18, 2026, 8:32:28 AM","dateUpdated":"May 18, 2026, 2:37:55 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://mattermost.com/security-updates\n","aliases":"CVE-2026-6343\nGHSA-m79q-8qf5-v622\n","assigner":"Mattermost","epss":0.17,"enisaIdProduct":[{"id":"1a4d3650-7987-35ec-bb5a-12dfce209e8f","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.5.0 ≤11.5.1"},{"id":"31593f6f-94cf-3d47-bd2d-23b8c1adee75","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.13"},{"id":"f882e98e-0d24-3a4e-89e5-7b72e28c865f","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.4.0 ≤11.4.3"}],"enisaIdVendor":[{"id":"c4ce7746-ede5-314d-be2d-7b7474d54cfb","vendor":{"name":"Mattermost"}}],"enisaIdVulnerability":[{"id":"9bf59c80-6829-32bb-b3c2-0ccd4e83358e","vulnerability":{"id":"GHSA-m79q-8qf5-v622","description":"Mattermost doesn\u0027t check public/private permissions","datePublished":"May 18, 2026, 9:31:48 AM","dateUpdated":"Jun 1, 2026, 3:38:19 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-6343\nhttps://github.com/mattermost/mattermost-plugin-playbooks/commit/887d9cacb61655d40f20ad9d6e35b408a127c380\nhttps://github.com/mattermost/mattermost\nhttps://mattermost.com/security-updates\n","enisa_id":"EUVD-2026-30751\n","aliases":"CVE-2026-6343\nGHSA-m79q-8qf5-v622\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f0ca833f-3097-38b7-bd75-88999362fc21","vulnerability":{"id":"CVE-2026-6343","description":"Mattermost versions 11.5.x \u003c\u003d 11.5.1, 10.11.x \u003c\u003d 10.11.13, 11.4.x \u003c\u003d 11.4.3 fail to check public/private permissions which allows members without these permissions to access public playbooks via /get.. Mattermost Advisory ID: MMSA-2026-00591","datePublished":"May 18, 2026, 8:32:28 AM","dateUpdated":"May 18, 2026, 2:37:55 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://mattermost.com/security-updates\n","enisa_id":"EUVD-2026-30751\n","assigner":"Mattermost","epss":0.17,"dataProcessed":"Nov 3, 2026, 7:17:32 AM","vulnerabilityProduct":[{"id":"55ba41ed-b241-32f8-b092-6b79b216f445","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.4.0 ≤11.4.3"},{"id":"5a98dddb-a6a0-3017-8182-dc2edc15db07","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.5.0 ≤11.5.1"},{"id":"da9ecd1b-dd56-3d63-94f2-ab479beb149d","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.13"}],"vulnerabilityVendor":[{"id":"45311e0f-5f27-3dc1-b09a-9fdaeefdd13e","vendor":{"name":"Mattermost"}}]}}],"enisaIdAdvisory":[]}