CVSS 4.3 (medium) · published 2026-10-22
Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709
Affected products (NVD): mattermost mattermost_server
Fixed in (NVD): 11.7.12
Weakness: CWE-754
Source: NVD CVE-2026-13411
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.