Vulnerability Details CVE-2026-1046
Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.6%
CVSS Severity
CVSS v3 Score 7.6
References
Products affected by CVE-2026-1046
-
cpe:2.3:a:mattermost:mattermost_desktop:5.13.2
-
cpe:2.3:a:mattermost:mattermost_desktop:6.0.0
-
cpe:2.3:a:mattermost:mattermost_desktop:6.0.1
-
cpe:2.3:a:mattermost:mattermost_desktop:6.0.2