CVE-2026-4055

MediumCVSS 4.3/10Last modified Jul 23, 2026

Description

Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create permission against the target team when creating a playbook run which allows an authenticated team member to create runs in teams where they lack permission via specifying a different team ID in the run creation API request. Mattermost Advisory ID: MMSA-2026-00629

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: May 21, 2026
Last modified: Jul 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-405506.9Multiple BinSoft products are vulnerable to Privilege Escalation due to excessive database privileges assigned to the user used by the appli CVE-2026-405518.4Multiple BinSoft products perform client-side authentication. An attacker with access to any application instance connected to the backend s CVE-2026-405524.7Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user with access to the application and direct access to CVE-2026-405537.5Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to cr CVE-2026-405574.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.CVE-2026-40565.4The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check CVE-2026-405607.5Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Cont CVE-2026-405615.3Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Conte CVE-2026-405627.5Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Conte CVE-2026-405638.1Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpo CVE-2026-405646.5Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. CVE-2026-405656.1FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function in app/Misc/Helper.ph