CVE-2026-1629 — Permalink Preview Information Disclosure After Permission Revocation
Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing private chann…
Published: 2026-03-16 · CVSS: 4.3 · CVSS 3.1
Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing private channel content via previously cached permalink previews until cache reset or relogin.. Mattermost Advisory ID: MMSA-2026-00580
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7