https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:22:25.860120+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-47871 CVE-2025-47871 — Mattermost Playbooks exposes private channel metadata to unauthorized users via run metadata API 2026-10-08T07:22:25.876079+00:00

Affected: Mattermost

Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive information about linked private channels including channel name, display name, and participant count through the run metadata API endpoint.