Skip to content
Sign in
6.5 Medium

CVE-2026-93850 Mattermost versions…

Description

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of text extracted from an uploaded PDF which allows an authenticated user to exhaust server memory and cause a denial of service via a crafted PDF whose compressed content stream expands into a very large amount of text.. Mattermost Advisory ID: MMSA-2026-00769

Affected products and versions

Product Affected versions Fixed in
Mattermost 11.11 earliest → < 11.11.0 11.11.0
Mattermost 11.10 11.10.0 → 11.10.1 11.10.2
Mattermost 11.9 11.9.0 → 11.9.1 11.9.2
Mattermost 11.8 11.8.0 → 11.8.5 11.8.6
Mattermost 11.7 11.7.0 → 11.7.10 11.7.11

Other CVEs of Mattermost

The 480 CVEs of Mattermost →
CVE-2026-93851 Mattermost versions… 8.0 High CVE-2026-93846 Mattermost versions… 3.8 Low CVE-2026-93848 Mattermost versions… 2.7 Low CVE-2026-93849 Mattermost versions… 6.5 Medium
Track this CVE