CyberRota Analysis
AI-GeneratedCertain versions of Mattermost are vulnerable due to insufficient enforcement of board-creation permissions, allowing unauthorized authenticated users to create boards through specific endpoints. This could lead to unauthorized access and manipulation of sensitive data within the application. Organizations using affected versions should prioritize patching to mitigate potential risks associated with unauthorized board creation.
Original NVD Description
Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to enforce the board-creation permission which allows an unauthorized authenticated user to create boards via the board duplicate, boards-and-blocks, and archive-import endpoints.. Mattermost Advisory ID: MMSA-2026-00715