Go/github.com/mattermost/mattermost/server/v8 CVE-2026-2463: medium 4.3, EPSS 0.18%

Mattermost fails to filter invite IDs based on user permissions

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20260105134819-cc427af41b2a or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20260105134819-cc427af41b2a

Affected

Fixed versions

Sources

• osv: GHSA-fx49-m253-27jj
• https://nvd.nist.gov/vuln/detail/CVE-2026-2463
• https://github.com/mattermost/mattermost/commit/cc427af41b2a8d3a552d8dc42978831dcfecc1d8
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2026-2463 · published 2026-03-16T15:30:43Z · modified 2026-03-23T18:56:08.610141Z · JSON