CVE-2026-27769

Go/github.com/mattermost/mattermost-server CVE-2026-27769: low 2.7

Mattermost doesn't validate whether users were correctly owned by the correct Connected Workspace

Action: Upgrade github.com/mattermost/mattermost-server to 8.0.0-20260316060126-bc1a2b34b1f9 or later.

go get github.com/mattermost/mattermost-server@v8.0.0-20260316060126-bc1a2b34b1f9

Affected

Fixed versions

Sources

• osv: GHSA-mxxh-fmjq-j6x4
• https://nvd.nist.gov/vuln/detail/CVE-2026-27769
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2026-27769 · published 2026-04-17T15:31:17Z · modified 2026-06-25T23:11:32.697672257Z · JSON

Go/github.com/mattermost/mattermost-server CVE-2026-27769: unknown

Mattermost doesn't validate whether users were correctly owned by the correct Connected Workspace in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5522
• https://github.com/advisories/GHSA-mxxh-fmjq-j6x4
• https://nvd.nist.gov/vuln/detail/CVE-2026-27769
• https://mattermost.com/security-updates

CVE-2026-27769 · published 2026-06-25T22:34:34Z · modified 2026-06-25T23:01:31.638503820Z · JSON