PT-2026-41659 · Mattermost · Mattermost

Eeshan · Published 2026-05-18 · Updated 2026-05-18 · CVE-2026-6345

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Mattermost version 11.5.1 Mattermost version 10.11.13 Mattermost version 11.4.3

Description An issue exists where the software fails to prevent the disclosure of created user passwords. This allows a malicious attacker to impersonate users by utilizing these passwords.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2026-6345

Affected Products

Mattermost

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-6345 · Security Note
• https://mattermost.com/security-updates · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2056340791241429121 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6345 · Note
• https://twitter.com/CVEarity/status/2056408491900952863 · Twitter Post
• https://t.me/CVEtracker/54119 · Telegram Post