CVE-2026-1046

← CVEs

HIGH 7.6

Published

2026-02-16

Last Modified

2026-03-23

Affected Apps

Affected Devices

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:L

Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577

Affected Applications in Environment 12

Desktop v4.67.0 (4.67.0.5)

2 devices

Desktop v4.41.2 (4.41.2.20)

2 devices

Desktop v4.62.0 (4.62.0.11)

2 devices

Desktop v4.63.0 (4.63.0.11)

3 devices

Desktop v4.66.0 (4.66.0.6)

4 devices

Desktop v4.64.0 (4.64.0.4)