Volerion logoVolerion
Volerion logoVolerion

Mattermost Password Disclosure Vulnerability Allowing User Impersonation

Vulnerability

A vulnerability exists in Mattermost versions 11.5.x through 11.5.1, 10.11.x through 10.11.13, and 11.4.x through 11.4.3, where the application fails to properly protect user passwords upon creation. This oversight enables a malicious attacker to impersonate users by exploiting the exposed passwords.

Impact

Exploitation of this vulnerability could lead to unauthorized user impersonation.

Remediation

Users can upgrade to Mattermost versions 11.7.0, 11.6.1, or 11.4.5 to address this vulnerability.

Added: May 18, 2026, 9:22 AM
Updated: May 18, 2026, 9:22 AM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
3.1
exploitability
5.2
remediation
7.7
relevance
8.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.