CVE-2026-9602

Published: Jul 17, 2026Modified: Jul 30, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: responsibledisclosure@mattermost.com (Secondary)

Description

Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00678

Affected (3)

Products: Mattermost: Mattermost Desktop

1 product

Mattermost Desktop

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mattermost Mattermost Desktop	After 6.2.1 to 6.3
Mattermost Mattermost Desktop	From 5.6.13 to 5.13.7
Mattermost Mattermost Desktop	From 6.0.2 to 6.2.1

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (1)

https://mattermost.com/security-updates

Source: responsibledisclosure@mattermost.com

Vendor Advisory

Timeline

No history available yet.