CVE-2026-8823
LOW
NVD
CVSS Score
3.8
Severity
LOW
Published
Jun 22, 2026
Vendor
unknown
Description
Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-privileged administrator to degrade arbitrary bot accounts via the standard demote-user API.. Mattermost Advisory ID: MMSA-2026-00669