CVE-2026-2299

MEDIO 4.3CVE-2026-2299 · Published 25/06/2026 · updated 25/10/2026

In breve

CVE-2026-2299 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda google drive (mattermost).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.20%, superiore al 10.0% delle vulnerabilità.
Correzione: aggiornare a 1.1.0 o successiva.

Package	Affected versions	Patched versions
google drive mattermost	`= 1.1.0< 1.1.0`	`1.1.0`

Description

The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Google Drive files to unauthorized private channels and disclose private channel membership.

References

mattermost/mattermost-plugin-google-drive release v1.1.0 · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free