NetSight
high7.6

CVE-2026-1046

Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on…

Impact

Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577

Affected products

VendorProductAffected versions
MattermostMattermost Desktop
from 5.13.0 before 5.13.3
from 6.0.0 before 6.0.3

Weakness classification

References