Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-93850— Unbounded memory consumption during PDF text extraction

Quick assessment

Affected
Mattermost Mattermost
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mattermost 版本 11.9.x（≤ 11.9.1）、11.8.x（≤ 11.8.5）、11.7.x（≤ 11.7.10）以及 11.10.x（≤ 11.10.1）存在缺陷，未能对从上传的 PDF 文件中提取的文本内容进行卷绑定（volume binding）限制。该缺陷允许已认证用户通过提交特制的 PDF 文件耗尽服务器内存，从而引发拒绝服务（DoS）攻击。此类特制 PDF 的压缩内容流在解压后会扩展为极大量的文本数据。Mattermost 安全公告编号：MMSA-2026-00769。

CVSS 6.5 · Medium EPSS 0.38% · P32

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 9

VendorProduct Version RangeStatus
Mattermost Mattermost 11.9.0≤ 11.9.1 affected
11.8.0≤ 11.8.5 affected
11.7.0≤ 11.7.10 affected
11.10.0≤ 11.10.1 affected
11.11.0 unaffected
11.9.2 unaffected
11.8.6 unaffected
11.7.11 unaffected
… +1 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-93850

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Unbounded memory consumption during PDF text extraction
Source: CVE Program / CVE List V5
Vulnerability Description
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of text extracted from an uploaded PDF which allows an authenticated user to exhaust server memory and cause a denial of service via a crafted PDF whose compressed content stream expands into a very large amount of text.. Mattermost Advisory ID: MMSA-2026-00769
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对高度压缩数据的处理不恰当(数据放大攻击)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Mattermost Mattermost 11.9.0 ~ 11.9.1 -

II. Public POCs for CVE-2026-93850

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-93850

请登录查看更多情报信息。

Same Patch Batch · Mattermost · 2026-10-26 · 6 CVEs total

CVE-2026-116516 6.5 MEDIUM Insufficient length validation when parsing Zoom chat transcriptions
CVE-2026-93849 6.5 MEDIUM Mattermost allows authenticated users to trigger excessive memory allocation via crafted m
CVE-2026-93846 3.8 LOW Team admin can escalate a team member's permissions via the team member roles endpoint
CVE-2026-93847 3.5 LOW Improper post type validation on scheduled post endpoints
CVE-2026-93848 2.7 LOW Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allow

IV. Related Vulnerabilities

Same product: Mattermost
Same vendor: Mattermost
Same weakness: CWE-409