BhaRat (hackit_bharat)

Unauthorized access to archived channel content via threads interface

Unauthorized channel member management through playbook runs

System Role with edit access to permissions can elevate themselves to system admin

Run Details leak to guest via webhook event "custom_playbooks_playbook_run_updated"

Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests.

Unauthorized access on archived channels via file links

Unauthorized channel file upload

Insufficient permissions checks on teams

Playbook Run Metadata leak to Guest

Playbook run link to private channel grants channel access