medium4.3
CVE-2026-13411
Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash t…
Impact
Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Versions 11.7.X | through 11.7.11 |
Versions were read from the advisory text. No structured product data has been published for this record yet.