Description

Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing {{/plugins/zoom/api/v1/channel-preference}}, which allows any logged-in user to change Zoom meeting restrictions for arbitrary channels via crafted API requests.. Mattermost Advisory ID: MMSA-2025-00558

INFO

Published Date :

2026-02-16T09:58:41.450Z

Last Modified :

2026-02-17T15:00:18.867Z

Source :

Mattermost
AFFECTED PRODUCTS

The following products are affected by CVE-2026-0997 vulnerability.

Vendors Products
Mattermost
  • Mattermost
  • Mattermost Server
  • Zoom
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-0997.

URL Resource
https://mattermost.com/security-updates cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact