CVE-2026-26230
Team Admin Privilege Escalation to Demote Members to Guest
概要
Team Admin Privilege Escalation to Demote Members to Guest
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members to guest role. Mattermost Advisory ID: MMSA-2025-00531
参照URL
- advisory github.com
- advisory mattermost.com
- advisory nvd.nist.gov