MEDIUM 4.3 Go
Mattermost Boards Plugin fails to implement authorisation checks on comment block modifications
GHSA-hf8w-x9h5-5gf9 · CVE-2026-2461 · GO-2026-4782
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisory ID: MMSA-2025-00559
Ready to move
Start Securing
Free, no credit card | First findings in minutes