Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-75587— Plaintext pre-auth secret exposure via Desktop App diagnostics report

Quick assessment

Affected
Mattermost Mattermost
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mattermost是美国Mattermost公司开源的一个开源协作平台。 Mattermost 6.2.2及之前版本存在信息泄露漏洞，该漏洞源于生成诊断报告时未能隐藏预认证密钥，可能导致具有诊断报告或日志文件访问权限的本地攻击者通过检查服务器连接诊断输出获取明文预认证密钥。

CVSS 3.6 · Low EPSS 0.09% · P1

Affected Version Matrix 3

VendorProduct Version RangeStatus
Mattermost Mattermost ≤ 6.2.2 affected
6.3.0 unaffected
6.2.3.0 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-75587

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Plaintext pre-auth secret exposure via Desktop App diagnostics report
Source: CVE Program / CVE List V5
Vulnerability Description
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Mattermost 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mattermost是美国Mattermost公司开源的一个开源协作平台。 Mattermost 6.2.2及之前版本存在信息泄露漏洞，该漏洞源于生成诊断报告时未能隐藏预认证密钥，可能导致具有诊断报告或日志文件访问权限的本地攻击者通过检查服务器连接诊断输出获取明文预认证密钥。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Mattermost Mattermost 0 ~ 6.2.2 -

II. Public POCs for CVE-2026-75587

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-75587

请登录查看更多情报信息。

Same Patch Batch · Mattermost · 2026-08-17 · 13 CVEs total

CVE-2026-9816 8.3 HIGH Insufficient server-side validation of board member role fields permits privilege escalati
CVE-2026-10080 6.5 MEDIUM Boards plugin panics on WebSocket command with non-string field types
CVE-2026-9859 6.5 MEDIUM Mattermost Boards plugin didn’t enforce role-based authorization on board channel link all
CVE-2026-16048 6.3 MEDIUM Channel member roles accept out-of-scope roles
CVE-2026-10527 6.3 MEDIUM Boards plugin retains Board Admin rights for users demoted to System Guest
CVE-2026-16047 4.3 MEDIUM Board channel linking without read channel permission validation
CVE-2026-15754 4.2 MEDIUM Missing per-channel team-scope check in ABAC access control policy unassign allows cross-t
CVE-2026-16049 3.9 LOW _GitLab Plugin allows cross-channel post injection and phishing via missing channel permis
CVE-2026-16044 3.9 LOW Insufficient validation of guest board admin privileges on archive import
CVE-2026-16046 3.5 LOW Missing run-state validation on finished playbook runs
CVE-2026-9693 3.5 LOW Mattermost thread memberships persist after team removal, exposing private channel thread
CVE-2026-16045 2.7 LOW Delegated OAuth tokens could revoke unrelated OAuth application authorizations

IV. Related Vulnerabilities

Same product: Mattermost
Same vendor: Mattermost
Same weakness: CWE-200

V. Comments for CVE-2026-75587

No comments yet

Leave a comment