CVE-2026-13411
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Oct 22, 2026
Vendor
unknown
Description
Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709