CVE-2026-0999
Authentication bypass via userID login when email and username login are disabled
Résumé
Authentication bypass via userID login when email and username login are disabled
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate login method restrictions which allows an authenticated user to bypass SSO-only login requirements via userID-based authentication. Mattermost Advisory ID: MMSA-2025-00548
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory mattermost.com
- advisory nvd.nist.gov