TI-2026-79245 Aliases CVE-2026-13411 GHSA-2273-qcv6-r2xj

Null condition in Mattermost Playbooks import crashes the plugin

LOW 20CWE-754Published 2026-10-22 · Updated 2026-10-22

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Mattermost versions from 11.7.0 through 11.7.11 are affected. The Playbooks plugin does not validate null elements when decoding playbook import conditions (CWE-754). An authenticated attacker with low privileges can send a crafted import request containing a null condition, which crashes the Playbooks plugin for the whole instance.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00328 26th percentileScored 2026-11-07

Fix Fixed Mattermost (Mattermost): 11.10.0, 11.7.12

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Mattermost	Mattermost	11.7.0 – 11.7.11	11.10.0, 11.7.12	Patch available	CNA

Mattermost VendorMattermost Affected 11.7.0 – 11.7.11 Fixed in 11.10.0, 11.7.12 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:mattermost:mattermost_server::::::::	11.7.0 to before 11.7.12	Vulnerable	Mattermost

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* Versions 11.7.0 to before 11.7.12 Vulnerable ·Mattermost

Remediation

Upgrade Mattermost to 11.7.12 or 11.10.0, which fix this flaw according to Mattermost advisory MMSA-2026-00709.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Fix · CNA Mattermost (Mattermost) Fixed in 11.10.0, 11.7.12

Timeline

2026-10-22 Threatist record created from CVE-2026-13411
2026-10-22 Alias added: GHSA-2273-qcv6-r2xj
2026-10-22 CISA SSVC decision points changed

References

Advisory 1

MMSA-2026-00709

TI-2025-18933 Arbitrary file read in Mattermost Boards via import & export board archive CVSS 3.1CRITICAL 9.9
TI-2025-04465 Path Traversal Leading to RCE by Any Authenticated Mattermost User CVSS 3.1CRITICAL 9.9
TI-2017-14068 An issue was discovered in Mattermost Server before 3.6.2. CVSS 3.1CRITICAL 9.8
TI-2017-14060 An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. CVSS 3.1CRITICAL 9.8
TI-2017-14048 An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. CVSS 3.1CRITICAL 9.8
TI-2025-14360 Arbitrary file read via block duplication in Mattermost Boards CVSS 3.1CRITICAL 9.9

See all 505 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences