Vulnerability Details CVE-2026-8075
Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermost Advisory ID: MMSA-2026-00668
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 14.5%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2026-8075
-
cpe:2.3:a:mattermost:mattermost_desktop:*
-
cpe:2.3:a:mattermost:mattermost_desktop:5.10.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.10.1
-
cpe:2.3:a:mattermost:mattermost_desktop:5.10.2
-
cpe:2.3:a:mattermost:mattermost_desktop:5.11.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.11.1
-
cpe:2.3:a:mattermost:mattermost_desktop:5.11.2
-
cpe:2.3:a:mattermost:mattermost_desktop:5.11.3
-
cpe:2.3:a:mattermost:mattermost_desktop:5.12.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.12.1
-
cpe:2.3:a:mattermost:mattermost_desktop:5.13.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.13.1
-
cpe:2.3:a:mattermost:mattermost_desktop:5.13.2
-
cpe:2.3:a:mattermost:mattermost_desktop:5.13.3
-
cpe:2.3:a:mattermost:mattermost_desktop:5.6.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.7.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.8.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.8.1
-
cpe:2.3:a:mattermost:mattermost_desktop:5.9.0
-
cpe:2.3:a:mattermost:mattermost_desktop:5.9.1
-
cpe:2.3:a:mattermost:mattermost_desktop:5.9.2
-
cpe:2.3:a:mattermost:mattermost_desktop:6.0.2
-
cpe:2.3:a:mattermost:mattermost_desktop:6.0.3
-
cpe:2.3:a:mattermost:mattermost_desktop:6.0.4
-
cpe:2.3:a:mattermost:mattermost_desktop:6.1.0
-
cpe:2.3:a:mattermost:mattermost_desktop:6.2.0