Low severity3.8NVD Advisory· Published Oct 26, 2026· Updated Oct 26, 2026
CVE-2026-93846
CVE-2026-93846
Description
Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigned to a team member via the API, which allows a team admin to grant a team member permissions beyond those permitted by the configured permission scheme via the {{update-team-member-roles}} REST API.. Mattermost Advisory ID: MMSA-2026-00734
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=11.7.10
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.