Legal Hold (Mattermost) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2026-05-27. Vendor: Mattermost.

CVEs of Legal Hold

• CVE-2026-6957 - CVSS 8 (high), 2026-05-27: Mattermost Plugins versions <=1.1.5 fail to sanitize filenames received from federated peers before using them to construct export destination paths, which…
• CVE-2026-3524 - CVSS 8.8 (high), 2026-04-06: Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated…