Junglewise Threat Intelligence

CVE-2026-26304: GO-2026-4812 - Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks

CVE-2026-26304 · Severity: low · CVSS 3.1 · Published 2026-03-23

Technologies: github.com/mattermost/mattermost-plugin-playbooks (Go). Vendors: Go.

Executive brief

Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks

Affected products

  • Go github.com/mattermost/mattermost-plugin-playbooks

Related threats