Mattermost
Moderate fix3 remedies
cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*
Moderate fix3 remedies
- >= 11.3, <= 11.3.0
- >= 11.2, <= 11.2.2
Mattermost Playbook Run API Unauthorized Access Vulnerability
Vulnerability
Patched
A vulnerability exists in Mattermost versions 11.3.x through 11.3.0 and 11.2.x through 11.2.2, where the application fails to properly verify the 'run_create' permission for empty 'playbookId' fields. This oversight allows team members to create unauthorized playbook runs via the Playbook Run API.
Impact
Exploitation of this vulnerability could lead to unauthorized creation of playbook runs, potentially allowing users to execute actions or workflows that they should not have permission to manage.
Remediation
Users can upgrade to Mattermost version 11.5.0 to address this vulnerability.
Added: Mar 16, 2026, 9:11 PM
Updated: Mar 16, 2026, 9:11 PM
Vulnerability Rating
Custom Algorithm
spread
3.1impact
0.6exploitability
5.2remediation
7.7relevance
4.0threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.