Go/github.com/mattermost/mattermost-plugin-zoom CVE-2026-0998: medium 4.3, EPSS 0.18%

Mattermost Plugin Zoom fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint

Action: Upgrade github.com/mattermost/mattermost-plugin-zoom to 1.12.0 or later.

go get github.com/mattermost/mattermost-plugin-zoom@v1.12.0

Affected

Fixed versions

Sources

• osv: GHSA-w65c-fvp5-fvc5
• https://nvd.nist.gov/vuln/detail/CVE-2026-0998
• https://github.com/mattermost/mattermost-plugin-zoom/commit/a8b58c43625ab25746e451acc4f71515d52c8122
• https://github.com/mattermost/mattermost-plugin-zoom
• https://mattermost.com/security-updates

CVE-2026-0998 · published 2026-02-16T12:30:24Z · modified 2026-02-23T19:40:56.803541Z · JSON