CVE-2026-8075

Published: Jul 17, 2026Modified: Jul 30, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: responsibledisclosure@mattermost.com (Secondary)

Description

Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermost Advisory ID: MMSA-2026-00668

Affected (3)

Products: Mattermost: Mattermost Desktop

1 product

Mattermost Desktop

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mattermost Mattermost Desktop	After 6.2.1 to 6.3
Mattermost Mattermost Desktop	From 5.5.13 to 5.13.6
Mattermost Mattermost Desktop	From 6.0.2 to 6.2.1

Related CWEs

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (1)

https://mattermost.com/security-updates

Source: responsibledisclosure@mattermost.com

Vendor Advisory

Timeline

No history available yet.