CVE-2026-3112 PUBLISHED CVSS 6.800000190734863 MEDIUM

Mattermost allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration

Risk Scores

CVSS v3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected Products

VendorProductVersions
mattermostmattermost_server10.11.0, 11.2.0, 11.3.0
github.commattermost/mattermost/server/v811.4.0-rc1, 11.3.0-rc1, 11.2.0-rc1
MattermostMattermost11.4.0, 11.3.0, 11.2.0

Timeline

References

Open in Interactive Console →