CVE-2026-13411 — Null condition in Playbooks import crashes the plugin
Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugi…
Published: 2026-10-22 · CVSS: 4.3 · CVSS 3.1
Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7