CVE-2026-1046

MEDIUM EPSS 14.3%
Published Feb 16, 20264mo ago · Modified Mar 23, 20263mo ago
6.5 CVSS 3.1
Medium
Find Similar
Published Feb 16, 2026 4mo ago
Last Modified Mar 23, 2026 3mo ago

Description

Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity High
Availability None

Threat Intelligence

EPSS Exploit Probability
14.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-939

Affected Products 2

VendorProductVersionRange
mattermostmattermost_desktop*≥5.13.2  –  <5.13.3
mattermostmattermost_desktop*≥6.0.0  –  <6.0.3

References 1

  • mattermost.com https://mattermost.com/security-updates
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.