PT-2026-52708 · Mattermost · Github.Com/Mattermost/Mattermost-Server

Juho Forsén · Publicado 2026-06-26 · Atualizado 2026-06-26 · CVE-2026-13426

NVD

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to validate path parameters when constructing API route paths which allows an attacker to redirect API calls to unintended endpoints via crafted IDs containing path traversal components. Mattermost Advisory ID: MMSA-2025-00532

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-13426

Produtos afetados

Github.Com/Mattermost/Mattermost-Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-13426 · Nota de Segurança
• https://mattermost.com/security-updates · Aviso do Fabricante