| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-plugin-playbooks | < 1.41.1-0.20260316224925-705f54a81841 | 1.41.1-0.20260316224925-705f54a81841 |
| mattermost server | ≥ 11.2.0, < 11.2.3≥ 11.3.0, < 11.3.1 | 11.2.311.3.1 |
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs via the playbook run API. Mattermost Advisory ID: MMSA-2025-00542
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free