Go/github.com/mattermost/mattermost-plugin-playbooks CVE-2026-4286: low 3.1, EPSS 0.14%
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks
Action: Upgrade github.com/mattermost/mattermost-plugin-playbooks to 1.41.1-0.20260213020129-e1d6ec2c94e6 or later.
go get github.com/mattermost/mattermost-plugin-playbooks@v1.41.1-0.20260213020129-e1d6ec2c94e6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.41.1-0.20260213020129-e1d6ec2c94e6 | - |
Fixed versions
| 1.41.1-0.20260213020129-e1d6ec2c94e6 |
Sources
- osv: GHSA-gvg4-jhmr-6j23#Go/github.com/mattermost/mattermost-plugin-playbooks
- https://nvd.nist.gov/vuln/detail/CVE-2026-4286
- https://github.com/mattermost/mattermost-plugin-playbooks/commit/e1d6ec2c94e695fb74e0c0c11c0d45e028bb96f3
- https://github.com/mattermost/mattermost
- https://mattermost.com/security-updates
CVE-2026-4286 · published · modified · JSON