Riskcovery

CVE-2026-8075

Posting a malicious markdown image crashes the Mattermost Desktop App

State
Published
Severity
6.5 Medium
Published
Jul 17, 2026
Updated
Jul 17, 2026
Reserved
May 7, 2026

Read the record on cve.org

Description

Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermost Advisory ID: MMSA-2026-00668

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HMattermost

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
MattermostMattermost
  • 5.5.13 and earlierAffected
  • 6.0.2 and earlierAffected
  • 6.3.0Not affected
  • 5.13.6.0Not affected
  • 6.2.1.0Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.