What’s Vulnerable › Products

Mattermost Legal Hold vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Mattermost Legal Hold version is affected

Latest Mattermost Legal Hold vulnerabilities

• CVE-2026-6957 — Path traversal in Mattermost Legal Hold plugin via unsanitized file name from federated peer allows arbitrary file write. (CVSS 4.9)
• CVE-2026-3524 — Authorization Bypass in Mattermost Legal Hold Plugin Due to Missing Return After Permission Check (CVSS 8.8)