Go/github.com/mattermost/mattermost/server/v8 CVE-2026-0999: unknown, EPSS 0.20%

Mattermost fails to properly validate login method restrictions in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20251212052346-61651b0df7ea or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20251212052346-61651b0df7ea

Affected

Fixed versions

Sources

• osv: GO-2026-4520#Go/github.com/mattermost/mattermost/server/v8
• https://github.com/advisories/GHSA-3c9r-7f29-qp32
• https://nvd.nist.gov/vuln/detail/CVE-2026-0999
• https://github.com/mattermost/mattermost/commit/61651b0df7ea5db55d1e54f8d6fb5fce4149309c
• https://mattermost.com/security-updates

CVE-2026-0999 · published 2026-02-23T18:23:12Z · modified 2026-02-23T19:41:19.676979Z · JSON