Remote Code Execution Risk in Mattermost Desktop App
CVE-2026-1628

4.6MEDIUM

Key Information:

Vendor

Mattermost
Status
Mattermost
Vendor
CVE Published:
2 March 2026

What is CVE-2026-1628?

The Mattermost Desktop App versions up to 5.13.3 contain a vulnerability that permits malicious servers to exploit the application by exposing preload script functionality. This occurs when users interact with external links within the app, compromising the integrity of the Mattermost environment and allowing potential exposure to untrusted interactions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Mattermost 0 <= 5.13.3

Mattermost 5.13.4.0

References

https://mattermost.com/security-updates
vendor-advisory

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

N/A
JSON
.