high7.6
CVE-2026-2476
Mattermost Microsoft Teams Plugin fails to properly mask sensitive configuration values
Impact
Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settings via exported configuration data. Mattermost Advisory ID: MMSA-2026-00606
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/mattermost/mattermost-plugin-msteams | < 1.15.1-0.20260102165339-036c761bd3cb | 1.15.1-0.20260102165339-036c761bd3cb |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Ms Teams | before 2.3.1 |