GHSA-mpc7-mm28-f6wq — Vulnetix

GHSA-mpc7-mm28-f6wq PUBLISHED CVSS 4.300000190734863 MEDIUM

Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope

Risk Scores

CVSS 3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions
github.com	mattermost/mattermost/server/v8	11.4.0, 11.4.0, 11.3.0-rc1

Timeline

Mar 26, 2026 CVE Published
Mar 31, 2026 CVE Updated
Apr 9, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2026-3115 advisory
https://github.com/mattermost/mattermost package
https://mattermost.com/security-updates url

Open in Interactive Console →

$ Console Community · 100/wk Open console ›