Remote Code Execution Vulnerability in Mattermost by Mattermost Inc.

CVE-2026-2462

What is CVE-2026-2462?

Mattermost versions 11.3.x up to 11.3.0, 11.2.x up to 11.2.2, and 10.11.x up to 10.11.10 are susceptible to a security flaw that permits unauthorized users to install malicious plugins on CI test instances leveraging default admin credentials. This vulnerability could lead to remote code execution, enabling attackers to access sensitive configuration data including AWS and SMTP credentials, thereby posing significant risks to data security. The issue arises from insufficient restrictions on plugin installations, particularly when changing the import directory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References