Go/github.com/mattermost/mattermost-plugin-boards CVE-2026-2461: unknown, EPSS 0.17%

Mattermost Boards Plugin fails to implement authorisation checks on comment block modifications in github.com/mattermost/mattermost-plugin-boards

Action: Upgrade github.com/mattermost/mattermost-plugin-boards to 0.0.0-20260108044135-57c5be5b6ef5 or later.

go get github.com/mattermost/mattermost-plugin-boards@v0.0.0-20260108044135-57c5be5b6ef5

Affected

Fixed versions

Sources

• osv: GO-2026-4782
• https://github.com/advisories/GHSA-hf8w-x9h5-5gf9
• https://nvd.nist.gov/vuln/detail/CVE-2026-2461
• https://github.com/mattermost/mattermost-plugin-boards/commit/57c5be5b6ef59d02dd72e35094d1fae8ba6e9619
• https://mattermost.com/security-updates

CVE-2026-2461 · published 2026-03-23T18:16:14Z · modified 2026-03-23T18:45:19.047130Z · JSON